Missing configured "sql" scope in Databricks Apps User Token

[spoltier]

I have User authorization for apps enabled in my workspace.

I have added the sql scope to my app. However, when making sql queries to my app, authorization errors ensue:

Error during request to server: : Provided OAuth token does not have required scopes.

I have managed to inspect the JWT that is provided via x-forwarded-access-token and it indeed is missing the "sql" scope.

One thing that could be causing issues is that I'm not sure that I approved the sql scope at the time I first accessed the app. It would be good to be able to reapprove / disapprove the app as a user, both for troubleshooting and security reasons.

[spoltier]

Replying to add that the scope field has value

"offline_access email iam.current-user:read openid iam.access-control:read profile"

[Advika · Accepted solution]

Hello @spoltier!

To update your token with the new scope, first add "sql" to your app, then stop and restart the app so that, when you next access it, Databricks will prompt you to the consent screen and grant the updated scopes. If you don't see the consent prompt after relaunching, try logging out and clearing your browser session.

[spoltier]

@Advika thanks. It looks like this was only a temporary issue; I had already restarted the app, but today it is working. I will mark your answer as accepted. The problem may have been due to recreating the app (using bundles), which reset the user scopes.