topic Re: Unable to grant catalog access to service principal in Get Started Discussions

Unable to grant catalog access to service principal

Kasen — Tue, 07 May 2024 05:10:38 GMT

Hi everyone,

I created a service principals called TestServicePrincipal. I tried to grant the catalog access to the service principals, but the error mentioned that it could not find principal with name TestServicePrincipal. If I grant the access to specific user by replacing `TestServicePrincipal` to `user1@mycompany.com`, then it works fine. May I know what is the reason that I can't grant the catalog access to the service principals that I created? By right I should be able to do so by following the documentation below:

https://docs.databricks.com/en/sql/language-manual/security-grant.html

Any help or advise will be greatly appreciated, thank you.

Re: Unable to grant catalog access to service principal

dtilen — Mon, 16 Dec 2024 08:11:27 GMT

Instead of referring to the service principal by its display name, use it's application_id.

It isn't overtly stated in the documentation you shared, but you can see it in the example portion.

-- Granting a privilege to the service principal fab9e00e-ca35-11ec-9d64-0242ac120002
> GRANT SELECT ON TABLE t TO `fab9e00e-ca35-11ec-9d64-0242ac120002`;

Re: Unable to grant catalog access to service principal

OYESPEEDY — Mon, 16 Dec 2024 09:33:09 GMT

The issue could be related to how the service principal is being resolved in your system. Unlike users, service principals are often registered in a directory (like Azure AD), and their names might not match what you’re using. Instead of using TestServicePrincipal as the name, try referencing the service principal's Object ID, App ID, or the exact display name as registered in your directory.