Prevent Access to AI Functions Execution

[Raman_Unifeye]

As a workspace Admin, I want to prevent unexpected API costs from unrestricted usage of AI Functions (AI_QUERY() etc.), how can we control that only a particular group-users can execute AI Functions ?

I understand the function execution cost can be viewed from https://docs.databricks.com/aws/en/large-language-models/ai-functions#-view-costs-for-ai-function-wo... but perhaps it will be too late 😉

Best Practice and guidelines pls.

[iyashk-DB]

Hi @Raman_Unifeye ,
For PT (Provisioned Throughput) endpoints, on the UI, you will have an option to edit "Permissions" and set a specific User/Group that can query them. You will have to assign that group "Can Query" permission. By Default all Admins will have access to this.

 Thanks,
Yashwanth