https://community.databricks.com/t5/data-engineering/create-account-wide-groups-without-account-admin-permissions/m-p/4575#M1257 <P>The use case is quite simple: each environment - databricks workspace (prod, test, dev) will be created by a separate service principal (which for isolation purpose should not have account wide admin permission) with terraform, but will belong to the same account. To simplify management I wanted to create groups per each environment and grant those some permissions. As far as I understand the <A href="https://learn.microsoft.com/en-us/azure/databricks/administration-guide/users-groups/groups#who-can-manage-groups" alt="https://learn.microsoft.com/en-us/azure/databricks/administration-guide/users-groups/groups#who-can-manage-groups" target="_blank">documentation</A> it is not possible yet. If so, where can I open feature request? Or it is already planned / under development?</P> Wed, 10 May 2023 13:31:06 GMT marcin-sg 2023-05-10T13:31:06Z https://community.databricks.com/t5/data-engineering/create-account-wide-groups-without-account-admin-permissions/m-p/4575#M1257 <P>The use case is quite simple: each environment - databricks workspace (prod, test, dev) will be created by a separate service principal (which for isolation purpose should not have account wide admin permission) with terraform, but will belong to the same account. To simplify management I wanted to create groups per each environment and grant those some permissions. As far as I understand the <A href="https://learn.microsoft.com/en-us/azure/databricks/administration-guide/users-groups/groups#who-can-manage-groups" alt="https://learn.microsoft.com/en-us/azure/databricks/administration-guide/users-groups/groups#who-can-manage-groups" target="_blank">documentation</A> it is not possible yet. If so, where can I open feature request? Or it is already planned / under development?</P> Wed, 10 May 2023 13:31:06 GMT https://community.databricks.com/t5/data-engineering/create-account-wide-groups-without-account-admin-permissions/m-p/4575#M1257 marcin-sg 2023-05-10T13:31:06Z https://community.databricks.com/t5/data-engineering/create-account-wide-groups-without-account-admin-permissions/m-p/4576#M1258 <P>Another thing would be also to assign workspace to a metastore without account admin permission - for similar reason.</P> Fri, 12 May 2023 15:16:24 GMT https://community.databricks.com/t5/data-engineering/create-account-wide-groups-without-account-admin-permissions/m-p/4576#M1258 marcin-sg 2023-05-12T15:16:24Z