Unable to grant catalog access to service principal

[Kasen]

Hi everyone,

I created a service principals called TestServicePrincipal. I tried to grant the catalog access to the service principals, but the error mentioned that it could not find principal with name TestServicePrincipal. If I grant the access to specific user by replacing `TestServicePrincipal` to `user1@mycompany.com`, then it works fine. May I know what is the reason that I can't grant the catalog access to the service principals that I created? By right I should be able to do so by following the documentation below:

https://docs.databricks.com/en/sql/language-manual/security-grant.html

Any help or advise will be greatly appreciated, thank you.

[dtilen]

Instead of referring to the service principal by its display name, use it's application_id.

It isn't overtly stated in the documentation you shared, but you can see it in the example portion.

-- Granting a privilege to the service principal fab9e00e-ca35-11ec-9d64-0242ac120002
> GRANT SELECT ON TABLE t TO `fab9e00e-ca35-11ec-9d64-0242ac120002`;

[OYESPEEDY]

The issue could be related to how the service principal is being resolved in your system. Unlike users, service principals are often registered in a directory (like Azure AD), and their names might not match what you’re using. Instead of using TestServicePrincipal as the name, try referencing the service principal's Object ID, App ID, or the exact display name as registered in your directory.