https://community.databricks.com/t5/get-started-discussions/deny-assignment-modification-to-allow-attach-detach-of-disks-in/m-p/59742#M2524 <P>Our application does storage autoscaling on Azure. We would like to deploy our solution with Azure databricks. But even though the service principal associated with our application has the necessary roles and permissions to attach/detach a disk from a VM, its unable to do because of the deny assignment created by databricks on azure. Is there a way to modify the deny assignment or get the service principal associated with our appplication in the exludePrincipal section of the deny assignment.<BR /><BR />If this is not possible, does databricks itself provides api's to attach / detach a disk from a VM</P> Fri, 09 Feb 2024 04:29:27 GMT Lucidity 2024-02-09T04:29:27Z https://community.databricks.com/t5/get-started-discussions/deny-assignment-modification-to-allow-attach-detach-of-disks-in/m-p/59742#M2524 <P>Our application does storage autoscaling on Azure. We would like to deploy our solution with Azure databricks. But even though the service principal associated with our application has the necessary roles and permissions to attach/detach a disk from a VM, its unable to do because of the deny assignment created by databricks on azure. Is there a way to modify the deny assignment or get the service principal associated with our appplication in the exludePrincipal section of the deny assignment.<BR /><BR />If this is not possible, does databricks itself provides api's to attach / detach a disk from a VM</P> Fri, 09 Feb 2024 04:29:27 GMT https://community.databricks.com/t5/get-started-discussions/deny-assignment-modification-to-allow-attach-detach-of-disks-in/m-p/59742#M2524 Lucidity 2024-02-09T04:29:27Z https://community.databricks.com/t5/get-started-discussions/deny-assignment-modification-to-allow-attach-detach-of-disks-in/m-p/59749#M2525 <P>Hi&nbsp;<a href="https://community.databricks.com/t5/user/viewprofilepage/user-id/99557">@Lucidity</a>&nbsp;, Thanks for bringing up your concerns, always happy to help&nbsp;<span class="lia-unicode-emoji" title=":beaming_face_with_smiling_eyes:">😁</span></P> <P>According to the provided information, it seems that you are attempting to modify the disk resources. However, access is being denied due to a deny assignment. This denial is occurring because the resources are within a managed resource group (MRG). When attempting to make changes to a managed resource group or its associated resources, users encounter system deny assignment errors.</P> <P>Under a managed resource group, users have restricted access. These MRGs are established during workspace creation and are under the control of Databricks management. No alterations or modifications can be applied to the MRG itself or the resources within it.</P> <P>Please refer this document for the more details:&nbsp;<A href="https://learn.microsoft.com/en-us/azure/role-based-access-control/deny-assignments" target="_blank">https://learn.microsoft.com/en-us/azure/role-based-access-control/deny-assignments</A></P> <P>Please let me know if this helps and leave a like if this helps, followups are appreciated.<BR />Kudos<BR />Ayushi</P> Fri, 09 Feb 2024 05:06:17 GMT https://community.databricks.com/t5/get-started-discussions/deny-assignment-modification-to-allow-attach-detach-of-disks-in/m-p/59749#M2525 Ayushi_Suthar 2024-02-09T05:06:17Z https://community.databricks.com/t5/get-started-discussions/deny-assignment-modification-to-allow-attach-detach-of-disks-in/m-p/59750#M2526 <P>Thank you for your reply<BR /><BR />Is there any way databricks provides to bypass the deny assignment for specific apps? I noticed in the deny assignment unity-catalog-access-connector has been provided exlusion under the excludePrincipals section. is there a way to get our application also excluded from the deny assignment?<BR /><BR />Are you aware of any API's databricks provides to attach / detach disks from a VM part of databricks cluster part of managed resource group?<BR /><BR /><BR />Apart from this, would be really helpful if you can suggest any other alternatives<BR /><BR />thanks&nbsp;</P> Fri, 09 Feb 2024 05:25:17 GMT https://community.databricks.com/t5/get-started-discussions/deny-assignment-modification-to-allow-attach-detach-of-disks-in/m-p/59750#M2526 Lucidity 2024-02-09T05:25:17Z