https://community.databricks.com/t5/administration-architecture/databricks-workflow-jobs-view-log-permission/m-p/95452#M2134 <P>If we don't want to expose admin right to user group. What should we do to allow a specific user group to have permission to view all of the job logs in a Databricks account?&nbsp;<BR /><BR />We don't want to grant job level permission too.</P><P>Thanks,</P><P>VC</P> Tue, 22 Oct 2024 10:31:37 GMT VCHK 2024-10-22T10:31:37Z https://community.databricks.com/t5/administration-architecture/databricks-workflow-jobs-view-log-permission/m-p/95452#M2134 <P>If we don't want to expose admin right to user group. What should we do to allow a specific user group to have permission to view all of the job logs in a Databricks account?&nbsp;<BR /><BR />We don't want to grant job level permission too.</P><P>Thanks,</P><P>VC</P> Tue, 22 Oct 2024 10:31:37 GMT https://community.databricks.com/t5/administration-architecture/databricks-workflow-jobs-view-log-permission/m-p/95452#M2134 VCHK 2024-10-22T10:31:37Z https://community.databricks.com/t5/administration-architecture/databricks-workflow-jobs-view-log-permission/m-p/96254#M2170 <P>Hi, I guess you can use Databricks API to <A href="https://docs.databricks.com/api/workspace/jobs/list" target="_self">list jobs</A> and <A href="https://docs.databricks.com/api/workspace/jobs/setpermissions" target="_self">set</A> Can view permission to all jobs.</P><P>Sample code below:</P><P>&nbsp;</P><DIV><DIV><SPAN>import</SPAN><SPAN> requests</SPAN></DIV><DIV><SPAN>from</SPAN><SPAN> databricks_cli.sdk </SPAN><SPAN>import</SPAN><SPAN> ApiClient, JobsService, PermissionsService</SPAN></DIV><BR /><DIV><SPAN># Initialize the API client</SPAN></DIV><DIV><SPAN>api_client = ApiClient(</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; host=</SPAN><SPAN>"https://&lt;databricks-instance&gt;"</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; token=</SPAN><SPAN>"&lt;personal-access-token&gt;"</SPAN></DIV><DIV><SPAN>)</SPAN></DIV><BR /><DIV><SPAN># List all jobs</SPAN></DIV><DIV><SPAN>jobs_service = JobsService(api_client</SPAN><SPAN>)</SPAN></DIV><DIV><SPAN>jobs_list = jobs_service.list_jobs(</SPAN><SPAN>)</SPAN></DIV><BR /><DIV><SPAN># Set 'CAN_VIEW' permission to all jobs</SPAN></DIV><DIV><SPAN>permissions_service = PermissionsService(api_client</SPAN><SPAN>)</SPAN></DIV><DIV><SPAN>for</SPAN><SPAN> job </SPAN><SPAN>in</SPAN><SPAN> jobs_list[</SPAN><SPAN>'jobs'</SPAN><SPAN>]:</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; job_id = job[</SPAN><SPAN>'job_id'</SPAN><SPAN>]</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; permissions_service.update_job_permissions(</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; job_id,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; {</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </SPAN><SPAN>"access_control_list"</SPAN><SPAN>: [</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </SPAN><SPAN>"user_name"</SPAN><SPAN>: </SPAN><SPAN>"&lt;user-email&gt;"</SPAN><SPAN>,</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </SPAN><SPAN>"permission_level"</SPAN><SPAN>: </SPAN><SPAN>"CAN_VIEW"</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ]</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; &nbsp; &nbsp; }</SPAN></DIV><DIV><SPAN>&nbsp; &nbsp; </SPAN><SPAN>)</SPAN></DIV></DIV> Sat, 26 Oct 2024 14:55:55 GMT https://community.databricks.com/t5/administration-architecture/databricks-workflow-jobs-view-log-permission/m-p/96254#M2170 SathyaSDE 2024-10-26T14:55:55Z