topic Re: Can I disable the workspace directory for specific user groups? in Data Engineering

Can I disable the workspace directory for specific user groups?

Chris_Shehu — Fri, 12 Nov 2021 19:01:45 GMT

We want to use the REPO directory in our production environment only and have a dev environment with less restrictions. If I use the checkbox on the group admin screen to disable workspace access, it locks out the entire Data Engineering section.

Re: Can I disable the workspace directory for specific user groups?

Anonymous — Sat, 13 Nov 2021 19:52:37 GMT

@Christopher Shehu - Hello again! Thank you for this question. It sounds like an interesting one!

Re: Can I disable the workspace directory for specific user groups?

Prabakar — Mon, 15 Nov 2021 14:01:01 GMT

Hi @Christopher Shehu Could you please check the below doc and let me know if it helps?

https://docs.databricks.com/repos.html#control-access-to-databricks-repos

Re: Can I disable the workspace directory for specific user groups?

User16871418122 — Wed, 24 Nov 2021 06:53:47 GMT

You can allow specific git URLs by for commits and push by whitelisting in workspace settings in admin console

Re: Can I disable the workspace directory for specific user groups?

Chris_Shehu — Wed, 24 Nov 2021 13:23:16 GMT

Thanks for the answers but I'm looking more for something where you can disable the folder structure and ONLY have a git repo in the databricks PRD environment. That way someone can't bypass the github process to create something in prod.

Re: Can I disable the workspace directory for specific user groups?

-werners- — Wed, 24 Nov 2021 13:27:57 GMT

I don't think that is possible as a user has always access to his own home folder.

Maybe you can think in another direction, like no access at all on production or user groups or restriction in cluster permissions?

Re: Can I disable the workspace directory for specific user groups?

Chris_Shehu — Wed, 24 Nov 2021 13:30:28 GMT

Yeah, that's the conclusion I came to but was hoping I was wrong. Thanks!

Re: Can I disable the workspace directory for specific user groups?

Chris_Shehu — Wed, 24 Nov 2021 17:04:49 GMT

So I found a way to get 85% of the way there:

1) Disable workspace access for the users group.

2) Create a new group or use another group that you created for the next step.

3) Go to the workspace and right click on whitespace in the root directory.

4) Add the new group/existing group with Read access.

This locks it so that new files can't be created or edited but the exception is the user's personal folder.

The permissions for that are greyed out and can't be changed.

So I proposed an idea to either have the ability to turn off personal folders or to modify the permissions.

see: https://feedback.azure.com/d365community/idea/70547d9f-464d-ec11-a819-0022484e8090