topic Re: Missing configured "sql" scope in Databricks Apps User Token in Administration & Architecture

Missing configured "sql" scope in Databricks Apps User Token

spoltier — Thu, 21 Aug 2025 09:18:13 GMT

I have User authorization for apps enabled in my workspace.

I have added the sql scope to my app. However, when making sql queries to my app, authorization errors ensue:

Error during request to server: : Provided OAuth token does not have required scopes.

I have managed to inspect the JWT that is provided via x-forwarded-access-token and it indeed is missing the "sql" scope.

One thing that could be causing issues is that I'm not sure that I approved the sql scope at the time I first accessed the app. It would be good to be able to reapprove / disapprove the app as a user, both for troubleshooting and security reasons.

Re: Missing configured "sql" scope in Databricks Apps User Token

spoltier — Thu, 21 Aug 2025 11:18:03 GMT

Replying to add that the scope field has value

"offline_access email iam.current-user:read openid iam.access-control:read profile"

Re: Missing configured "sql" scope in Databricks Apps User Token

Advika — Fri, 22 Aug 2025 13:57:24 GMT

Hello @spoltier!

To update your token with the new scope, first add "sql" to your app, then stop and restart the app so that, when you next access it, Databricks will prompt you to the consent screen and grant the updated scopes. If you don't see the consent prompt after relaunching, try logging out and clearing your browser session.

Re: Missing configured "sql" scope in Databricks Apps User Token

spoltier — Fri, 22 Aug 2025 14:50:51 GMT

@Advika thanks. It looks like this was only a temporary issue; I had already restarted the app, but today it is working. I will mark your answer as accepted. The problem may have been due to recreating the app (using bundles), which reset the user scopes.