topic Terraform databricks_grants errors on external_location in Administration & Architecture

Terraform databricks_grants errors on external_location

Conlyn — Wed, 05 Jun 2024 18:42:27 GMT

We are using terraform to setup Unity Catalog external locations and when using databricks_grants to set permissions on the external locations it throws the following error:

Error: cannot create grants: permissions for external_location-test_location are &{[{TEST_ROLE [ALL_PRIVILEGES] [Principal]}]}, but have to be {[{TEST_ROLE [ALL_PRIVILEGES] []}]}

Here is the plan output:

# databricks_grants.external_locations["test_location"] will be created + resource "databricks_grants" "external_locations" { + external_location = "test_location" + id = (known after apply) + grant { + principal = "TEST_ROLE" + privileges = [ + "ALL_PRIVILEGES", ] } }

We have tried multiple TF and Databricks provider versions including latest and all throw the same error.

Thanks,

-Conlyn

Re: Terraform databricks_grants errors on external_location

Conlyn — Wed, 05 Jun 2024 20:18:56 GMT

I should mention that the apply actually succeeds setting the permission, but the error is output and the state file only lists the workspace and external_location data elements.

Re: Terraform databricks_grants errors on external_location

Conlyn — Wed, 05 Jun 2024 22:38:37 GMT

I figured out my issue... The principal name is case sensitive and if the input value doesn't match the case of the email address or Group Name in the workspace/account it throws that ambiguous error.