topic Re: How to add existing recipient to existing delta share in Administration & Architecture

How to add existing recipient to existing delta share

chethankumar — Mon, 11 Nov 2024 10:42:10 GMT

I am facing an issue while adding a recipient to Delta Share using Terraform. The owner of my recipient is a group, not an individual user. I'm running this Terraform script using a service principal member of that group. However, I'm encountering the following issue when trying to create grants:
Error: cannot update grants: User is not an owner of Recipient 'abc'

Example script I have used.
resource "databricks_grants" "databricks_grants" {
share = "delta_sharing"
grant {
principal = "abc"
privileges = ["SELECT"]
}
}

Re: How to add existing recipient to existing delta share

Walter_C — Tue, 12 Nov 2024 14:04:41 GMT

The issue you are encountering is due to the fact that the service principal you are using does not have the necessary ownership permissions on the recipient 'abc'.

Here are some steps you can take to resolve this issue:

Verify Ownership: Ensure that the service principal is indeed a member of the group that owns the recipient 'abc'. You can check the ownership settings in the Databricks workspace.
Grant Ownership: If the service principal is not an owner, you will need to grant ownership to the service principal. This can be done using the Databricks CLI or through the Databricks UI. For example, you can use the following command to update the owner of the recipient:
```
databricks recipients update --name abc --owner <service-principal-id>
```
Check Permissions: Ensure that the service principal has the necessary permissions to perform the operation. This includes having the USE RECIPIENT and SET RECIPIENT PERMISSION privileges.

Re: How to add existing recipient to existing delta share

chethankumar — Tue, 12 Nov 2024 15:38:08 GMT

@Walter_C
Thank you for your response. However, I want to set the recipient owner as a group, not a single user or service principal, because I need to assign multiple service principals as owners of the recipient. I have multiple workspaces, and I want to use separate service principals for each workspace

Re: How to add existing recipient to existing delta share

chethankumar — Thu, 14 Nov 2024 09:20:35 GMT

I was able to fix the issue. The problem was that the service principal I was using didn’t have the correct permissions assigned