AIM with Entra ID Groups – Users and Service Principals not visible in Workspace

[hasanakhuy]

Hello Community,

I am testing Automatic Identity Management (AIM) in Databricks with Unity Catalog enabled.

Steps I did:

      •     AIM is activated

      •     In Microsoft Entra ID I created a group g1 and added user u1 and service principal sp1

      •     I expected auto sync between Databricks Account, Workspace (UC enabled) and Entra ID

      •     I assigned group g1 to Databricks Workspace w1

Expectation in workspace w1:

      •     Group g1 should be available

      •     User u1 should be visible as a workspace user

      •     Service principal sp1 should be visible in the workspace

Actual result:

      •     Group g1 appears in w1

      •     u1 and sp1 are not visible in the workspace

      •     User u1 could not access the workspace even though this user is in g1

Question:

Do I need to add users and service principals manually to the workspace (and in Terraform)? I expected that adding them to the group in Entra ID would automatically provision them in the workspace.

Thanks in advance.