Skip to content

[FEATURE] Support getting account level databricks_group for workspace admins #3412

@sebbegg

Description

@sebbegg

Use-cases

We're managing a few databricks workspaces and would like to migrate to more unity catalog features.
When trying to use databricks_permission_assignment to add an account level group to the workspace this fails, since we don't have account level permissions.

It appears that the {workspace-domain}/api/2.0/account/scim/v2/ API documented here:
https://learn.microsoft.com/en-us/azure/databricks/administration-guide/users-groups/groups#--manage-account-groups-using-the-api
is not supported / implemented.

Attempted Solutions

Tried fetching account-level group information via the account api.

Proposal

Not sure to be honest.
Since this is a workspace api it would probably be appropriate to have some flag on the databricks_group|user|service_principal?

References

(https://learn.microsoft.com/en-us/azure/databricks/administration-guide/users-groups/groups#--manage-account-groups-using-the-api)

Metadata

Metadata

Assignees

No one assigned

    Labels

    featureNew feature or requestneeds-apichanges to Databricks Platform APIs are required

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions