cancel
Showing results for 
Search instead for 
Did you mean: 
Administration & Architecture
Explore discussions on Databricks administration, deployment strategies, and architectural best practices. Connect with administrators and architects to optimize your Databricks environment for performance, scalability, and security.
cancel
Showing results for 
Search instead for 
Did you mean: 

Databricks Genie - Space Creation Restriction

Harish_Kumar_M
Visitor

Hi,

As Genie space can be created by anyone who has access to create by attaching a Delta Table and SQLWH. Is there a way to control or restrict space creation only by Admin Team group?

We want no one apart Admins to create and manage spaces. Users should only be granted option to use the space that Admin team creates for them and they shouldnt be allowed to create multiple spaces as they like if they have SQLWH and Delta Tables

2 REPLIES 2

davidmorton
Databricks Employee
Databricks Employee

Have you looked into Databricks One as a potential solution?

Using Databricks One, you can better segregate consumers from creators, and you can create a custom landing page for your users that will prevent them from having access to, or even seeing, all the other options that are usually in the left pane of the Databricks UI. It creates a much simpler working environment for them, and would also accomplish your goal of keeping people from creating all sorts of new things. 

https://www.databricks.com/blog/introducing-databricks-one

Basically, your users would have consumer access entitlement only, and that would prevent any of them from creating new things in Databricks.

nayan_wylde
Esteemed Contributor

Yes—lock space creation to your Admins by controlling entitlements and warehouse permissions. The ability to create a Genie space isn’t a separate toggle today; it’s implied by (a) the Databricks SQL workspace entitlement and (b) CAN USE on at least one Pro/Serverless SQL Warehouse (plus data SELECT). If you remove those from non‑admins and give them Consumer access instead, they can use spaces that Admins share with them, but they can’t create new ones