cancel
Showing results forย 
Search instead forย 
Did you mean:ย 
Administration & Architecture
Explore discussions on Databricks administration, deployment strategies, and architectural best practices. Connect with administrators and architects to optimize your Databricks environment for performance, scalability, and security.
cancel
Showing results forย 
Search instead forย 
Did you mean:ย 

SAT Tool Scan other workspaces

vvijay61
Visitor

Hello Team,

 

i have been setting up SAT in my Databricks workspace and i am able to do it and scan in my workspace. i have provided my SP access to all other Workspaces as well 

 

When i run the initialize job (SAT Initializer Notebook (one-time)) , I could notice that all workspaces in my account is being listed in the the "configs/workspace_configs.csv"


But when i trigger the job  "SAT Driver Notebook" it is still scanning only on current workspace. No other workspace are being scanned

can anybody help me out in scanning all other workspace as well in the SAT job or provide some clear documentation on this

Thanks

5 REPLIES 5

nayan_wylde
Honored Contributor III

@vvijay61Just confirming if your SPN have workspace admin access also you can make sure in the config csv if analysis_enabled = True

Hello, 

 

My SP have workspace admin access. When running initialization job. It is fetching all workspace ID

nayan_wylde
Honored Contributor III

Can you also  make sure in the config csv if analysis_enabled = True

vvijay61
Visitor

Its already set to true.

nayan_wylde
Honored Contributor III

I was reading the SAT GitHub page and this might be network issue as well.

If you run SAT on Serverless compute or behind IP ACLs, crossโ€‘workspace API calls can be blocked.
The Setup guide notes that SAT canโ€™t analyze other workspaces when:

The destination workspaces (or account) use IP ACLs that block the SAT workspace/compute, or
The SAT workspace enforces serverless egress control that prevents outbound calls.
Fix: Allow the egress/IPs, run SAT on classic compute, or deploy a separate SAT instance in the restricted workspace