AIM with Entra ID Groups – Users and Service Principals not visible in Workspace

hasanakhuy — Sat, 11 Oct 2025 08:06:10 GMT

Hello Community,

I am testing Automatic Identity Management (AIM) in Databricks with Unity Catalog enabled.

Steps I did:

• AIM is activated

• In Microsoft Entra ID I created a group g1 and added user u1 and service principal sp1

• I expected auto sync between Databricks Account, Workspace (UC enabled) and Entra ID

• I assigned group g1 to Databricks Workspace w1

Expectation in workspace w1:

• Group g1 should be available

• User u1 should be visible as a workspace user

• Service principal sp1 should be visible in the workspace

Actual result:

• Group g1 appears in w1

• u1 and sp1 are not visible in the workspace

• User u1 could not access the workspace even though this user is in g1

Question:

Do I need to add users and service principals manually to the workspace (and in Terraform)? I expected that adding them to the group in Entra ID would automatically provision them in the workspace.

Thanks in advance.

Re: AIM with Entra ID Groups – Users and Service Principals not visible in Workspace

dkushari — Sat, 18 Oct 2025 01:54:42 GMT

In Azure Databricks, when AIM is enabled, Entra users, service principals, and groups are available in Azure Databricks as soon as they’re granted permissions. Group memberships, including nested groups, flow directly from Entra ID, so permissions always reflect the latest updates.

Can you please check the status of these principals in the account or workspace? Refer to this blog. And the demo which shows the statuses of the principals.

topic Re: AIM with Entra ID Groups – Users and Service Principals not visible in Workspace in Administration & Architecture

AIM with Entra ID Groups – Users and Service Principals not visible in Workspace

Re: AIM with Entra ID Groups – Users and Service Principals not visible in Workspace