topic Re: Can we sync users and groups between AWS IAM and Databricks unity catalog as an effort to unify control access in one place in Data Governance

Can we sync users and groups between AWS IAM and Databricks unity catalog as an effort to unify control access in one place

AlberTad — Wed, 26 Apr 2023 18:30:30 GMT

Re: Can we sync users and groups between AWS IAM and Databricks unity catalog as an effort to unify control access in one place

karthik_p — Wed, 26 Apr 2023 20:08:12 GMT

@AlberTad As far as i know there is no direct integration between that, because UC is service to your databricks account. you can configure scim with databricks account and from account level --> unity catalog you can assign groups/users.

Re: Can we sync users and groups between AWS IAM and Databricks unity catalog as an effort to unify control access in one place

Hubert-Dudek — Wed, 26 Apr 2023 20:20:26 GMT

With SCIM, you can synchronize everything by using API calls or by using some ready tools available on the market https://docs.databricks.com/dev-tools/api/latest/scim/index.html

If you are on AWS, you can use AWS SSO:

To synchronize groups between Databricks and AWS using AWS SSO, you can follow these general steps:

Set up AWS SSO and configure the Databricks application in the AWS SSO console.
Configure the SCIM endpoint in Databricks to use AWS SSO as the SCIM provider.
Configure the mapping of groups between AWS SSO and Databricks so that the appropriate groups are synced between the two systems.

Other example tools on the market are Okta, OneLogin, Azure AD, auth0, and ping identity.

Re: Can we sync users and groups between AWS IAM and Databricks unity catalog as an effort to unify control access in one place

Anonymous — Mon, 01 May 2023 06:15:50 GMT

Hi @AlberTad

Hope everything is going great.

Just wanted to check in if you were able to resolve your issue. If yes, would you be happy to mark an answer as best so that other members can find the solution more quickly? If not, please tell us so we can help you.

Cheers!