topic Re: set access control list for job cluster in Administration & Architecture

set access control list for job cluster

mkieszek — Wed, 18 Sep 2024 09:55:44 GMT

Hello,

currently, we are using an init script that calls the DBW API to add "can_attach_to" permissions for a specific group to initialize the job cluster.

How can we set an access control list for job clusters? Is it possible to add it to a policy?

Re: set access control list for job cluster

szymon_dybczak — Wed, 18 Sep 2024 11:15:25 GMT

Hi @mkieszek ,

You can use REST API to set access control list for job clusters. The endpoint is for doing that you can find below
/api/2.0/permissions/clusters/{cluster_id} (https://docs.databricks.com/api/workspace/clusters/setpermissions)

And it's not possible to use policy for setting ACL. Look at below snippet from documentation:

https://docs.databricks.com/en/admin/clusters/policy-definition.html

Re: set access control list for job cluster

mkieszek — Wed, 18 Sep 2024 12:57:21 GMT

Thank for your response. This solution is currently in use.

It was done to be able access Spark UI and logs of jobs cluster. Maybe you know is it still needed?

Can I define access control list in job definition json?

Re: set access control list for job cluster

szymon_dybczak — Wed, 18 Sep 2024 13:05:19 GMT

In job definition you can only define ACL for the job, not for the cluster. So you can define who is an owner of the job, who can manage a job, who can manage and run etc.

Re: set access control list for job cluster

mkieszek — Thu, 19 Sep 2024 13:57:32 GMT

thanks for you answer.

I was referring to this part of job configuration

anyway, thank you for you effort.