topic Can not set Service Principal User role to a service principal in Data Engineering

Can not set Service Principal User role to a service principal

jgrycz — Wed, 13 Nov 2024 14:39:51 GMT

Hi!

I'm trying to assign `Service Principal Users` role to a newly create Service Principal using terraform.

For that I use following block of code:

```

resource "databricks_service_principal_role" "sp_job_runner_user_role" {

service_principal_id = databricks_service_principal.sp_job_runner.id

role = "roles/servicePrincipal.user"

}

```

Terraform complains with following error when I execute `terraform apply`:

```

Error: cannot create service principal role: invalidValue Invalid role value roles/servicePrincipal.user
```

What's the valid role name I should use?

I would like to do the same thing as on the below image:

I need that SP to run a databricks jobs, but without that role I'm unable to assign this SP in the `run_as` field because of this error:

```

Error: cannot update job: Cannot bind the service principal provided in 'run_as' field (.....) to the job. The user creating or updating the job must have 'servicePrincipal.user' role on the service principal.

```

Re: Can not set Service Principal User role to a service principal

Alberto_Umana — Wed, 13 Nov 2024 15:23:06 GMT

Hi @jgrycz,

Can you follow this block of code mentioned here: https://registry.terraform.io/providers/databricks/databricks/latest/docs/resources/access_control_rule_set

Please note:

Currently, we only support managing access rules on service principal, group and account resources through databricks_access_control_rule_set.

Re: Can not set Service Principal User role to a service principal

jgrycz — Thu, 14 Nov 2024 07:21:56 GMT

@Alberto_Umana thanks for help!