Using Terraform to GRANT SELECT ON ANY FILE securable

PNC — Wed, 29 Oct 2025 08:16:55 GMT

I have a use case where service principals will read .csv files from Azure Storage Account and create views from them. This used to work in our legacy environment but we are currently migrating to Unity Catalog and when we tested our existing jobs we ran into insufficient privileges error. Error message was that the "User does not have permission SELECT on any file." I read the documentation and found the following:

You must have SELECT privileges on the ANY FILE securable to read using the following patterns on Unity Catalog-enabled standard clusters:

Cloud object storage using URIs.

https://learn.microsoft.com/en-gb/azure/databricks/data-governance/table-acls/any-file

This is exactly what we are doing. So I tested by manually granting the following:

GRANT SELECT ON ANY FILE to `first.last@domain.com`;

After this reading files succeeded. Now the issue is that we are managing our configuration with Terraform and I would like to do add this into the configuration as well. However, I couldn't find which resource I should use to create this privilege. Any idea how to achieve this using Terraform? Or is there a better way of doing this? This is the way teams in my organization have done things before, so I'm not sure if they are willing to change things that much.

Re: Using Terraform to GRANT SELECT ON ANY FILE securable

nayan_wylde — Wed, 29 Oct 2025 14:53:08 GMT

you can try using this code.

resource "databricks_grants" "any_file_select_grant" { principal = "your_user_or_group_name" // Replace with the actual user or group privileges { privilege_type = "SELECT" securable_type = "ANY FILE" } }

Re: Using Terraform to GRANT SELECT ON ANY FILE securable

ThePussCat — Wed, 04 Mar 2026 11:00:36 GMT

How about... (not tried it myself)

resource "databricks_sql_permissions" "grant_select_any_file" {
any_file = true

  privilege_assignments {
    principal = "your-role"
    privileges = ["SELECT"]
 }
}

topic Using Terraform to GRANT SELECT ON ANY FILE securable in Administration & Architecture

Using Terraform to GRANT SELECT ON ANY FILE securable

Re: Using Terraform to GRANT SELECT ON ANY FILE securable

Re: Using Terraform to GRANT SELECT ON ANY FILE securable