topic It's possible to sync account group/user to workspace without the need to do it manually? in Administration & Architecture

It's possible to sync account group/user to workspace without the need to do it manually?

MarcoRezende — Mon, 01 Apr 2024 16:23:25 GMT

I am using Databricks SCIM for my Databricks Account, so when i add a user or group in the SCIM connector, the user or group its created in Databricks Account. After this, i need to manually assign the user/group to the workspaces. My boss wants to only add user/group in SCIM connector and its reflect in all the workspaces without the need to do manually, is there an option to this?

Re: It's possible to sync account group/user to workspace without the need to do it manually?

byronsalty — Thu, 30 Jan 2025 17:32:52 GMT

Also hopeful that there is an answer to this question.

Re: It's possible to sync account group/user to workspace without the need to do it manually?

Rjdudley — Thu, 30 Jan 2025 18:13:01 GMT

At this time I don't think you can automatically add a user/group directly to a workspace from EntraId one at a time. EntraId can sync to the account, but then admins need to assign users/groups to workspaces. If you have identity federation configured, you can add users/groups directly to a workspace and they will be sync'd up to the account automatically, but I don't think you want that because you're still adding each user/group manually.

The ideal setup for you now would be to have one or more EntraId groups which you assign to a workspace once, and assign permissions once. Then just put users in the appropriate groups, and they would sync automatically. These groups would be designed for different personas, like "data analyst" or "data scientist" and have the minimum set of permissions assigned for them to do their job.

Re: It's possible to sync account group/user to workspace without the need to do it manually?

saurabh18cs — Fri, 31 Jan 2025 13:19:01 GMT

Hi , I agree with @Rjdudley

EntraID groups are better