4 weeks ago - last edited 4 weeks ago
Is there an API that can be used to list groups in which a given user is a member? Specifically, Iād be interested in account (not workspace) groups.
It seems there used to be a workspace-level list-parents API referred to in the answers to this question. The current documentation, however, does not seem to mention list-parents ā has it been deprecated?
I know I can get the required info by listing each group's users and parsing the response, but thatās rather tedious. Is there an API for this I havenāt found?
3 weeks ago - last edited 3 weeks ago
Hi @rpl ,
Maybe you're looking for following endpoint. This endpoint will return in its payload all groups along with membership info. Then you can easily find where user you're interested in belongs to.
List group details | Account Groups API | REST API reference | Databricks on AWS
4 weeks ago
Hello @rpl,
You can explore this API: https://docs.databricks.com/api/workspace/users/get which would return an attribute (āgroupsā) showing the groups a user belongs to at the account level
4 weeks ago
Thanks! But this doesnāt do what I need. It is a workspace-level API that AFAIU returns info on groups that grant the user privileges to the workspace itself, probably also workspace-specific objects like secret scopes, folders etc. If the (account-level) user does not have privileges to he workspace in question, the API returns 404.
What i'm looking for is listing all account-level groups the user is a member in, including groups used to grant privileges to Unity Catalog securable objects. I also donāt necessarily know what workspaces (if any) the user has privileges to when i'm making the query.
3 weeks ago
@Alberto_Umana, do i understand correctly that there isnāt currently an endpoint that returns the info I need? May I request this feature be added on the roadmap? š
A bit of context: we have tens of catalogs in Unity Catalog and several workspaces in our account. Iād like a convenient way of querying what groups a user belongs to (our groups are named according to the objects they give privileges to). This would help a lot with troubleshooting when a user reports they don't have access to something they think they should.
I guess for the time being, I need to code a function that uses the python SDK and does some joining.
3 weeks ago - last edited 3 weeks ago
Hi @rpl ,
Maybe you're looking for following endpoint. This endpoint will return in its payload all groups along with membership info. Then you can easily find where user you're interested in belongs to.
List group details | Account Groups API | REST API reference | Databricks on AWS
3 weeks ago
That API returns the members of a group. I'm looking for the converse: i know the user and i'd like to know what groups they are a member of.
3 weeks ago - last edited 3 weeks ago
This API will return all groups that belong to your account. Also, in the json payload you have members attribute that you can leverge to filter out payload by a member to whom you want to find group names he belongs to.
If you perform that filtration, you'll end up with all the groups this user belongs to.
3 weeks ago
Brilliant, thank you! I tried out that one via databricks CLI, but the CLI doesnāt return members. Using the API directly fixed that.
3 weeks ago
Hi,
Cool, I'm happy that it worked for you š
Join a Regional User Group to connect with local Databricks users. Events will be happening in your city, and you wonāt want to miss the chance to attend and share knowledge.
If there isnāt a group near you, start one and help create a community that brings people together.
Request a New Group