topic Re: Disable Machine Learning and Job Creation in Data Engineering

Disable Machine Learning and Job Creation

valjas — Tue, 20 Feb 2024 03:21:02 GMT

We are working on creating a new databricks workspace for external entities. We have disabled Cluster and Warehouse creation permission but the external users are still able to create Jobs and job clusters. Is there a way to revoke Job creation permissions on a user or group level?

Is there a way to disable Machine Learning section?

Re: Disable Machine Learning and Job Creation

Ayushi_Suthar — Tue, 20 Feb 2024 06:16:51 GMT

Hi @valjas , Good Day!

Currently, we do have an open feature request for this but as a workaround we would suggest that you to restrict non-admin users from the job creation and allow them to view required jobs, in this case is the following:

Proceed with step A).
Create a job(s) and add its tags as required.
At job ACL level, assign "Can View".

The above will allow these users to interact with the required jobs, but not edit them or create new ones.

A) It is not possible at job ACL level. However, this can be worked around by removing the permissions to create clusters to the users you do not want to create jobs. Also please check the following steps:

Remove/adjust user from clusters with the Control access to clusters where they have "Can Manage" permissions.
Remove the required user from any cluster policy they have access to.

Please let me know if this helps and leave a like if this information is useful, followups are appreciated.
Kudos
Ayushi

Re: Disable Machine Learning and Job Creation

valjas — Tue, 20 Feb 2024 12:28:31 GMT

> "However, this can be worked around by removing the permissions to create clusters to the users you do not want to create jobs."

I have already removed Cluster creation permissions for the users, but they can still create a job from the UI and create a job cluster while creating the job. Is there a way to create a policy where I can restrict creating a job cluster and if there is one, can I enforce it on a specific user/group?

> "Remove the required user from any cluster policy they have access to"

Can you pls guide me on how to do this? How do I check which policy an user has access to and then revoke that?

Re: Disable Machine Learning and Job Creation

Venk1599 — Wed, 21 Feb 2024 04:56:11 GMT

It permits cluster creation during Workflow/Job/DLT pipeline creation. However, when attempting to start any of these, it fails with a 'Not authorized to create compute' error. Please try it and inform me of the outcome