Assigning Databricks Account Admin role to User group

[NadithK]

At my current organization, we have a few users with the Databricks Account admin role assigned. But as per our company policy, individual users should not be given such elevated privileges. They should be given to user groups so that users in those groups can be managed at AD level.

In that sense, is there a way to assign 'Databricks Account Admin' role to a user group instead of individual users.

We are currently using Azure AD and it is synced with Databricks using SCIM.

Thanks

[Kaniz · Accepted solution]

Hi @NadithK , 

This article explains how admins create and manage Databricks groups. For an overview of the Databricks identity model, see Databricks identities.

[NadithK]

Hi Kaniz,

Thank you for the feedback and I was able to find below solution from the article you have mentioned.

https://docs.databricks.com/en/administration-guide/users-groups/groups.html#assign-account-admin-ro...

Seems we can use Databricks Account REST APIs to assign Account Admin role to a particular user group. But this feature is not available through the portal.

Thanks again for the help