Unity catalog enabled workspace -Is there any way to disable workflow/job creation for certain users

[Avvar2022]

Currently in unity catalog enabled workspace users with "Workspace access" can create workflows/jobs, there is no access control available to restrict users from creating jobs/workflows.

Use case: In production there is no need for users, data engineers to create workflows. Even if there is a need also admin should be able have ability to manage access like we have for cluster, notebooks, etc..

One more thing i think would be nice is to be able to organize workflows in folders. 

[Lakshay]

There is no direct feature to disable job creation for certain users in Databricks. However, you can do the following workaround:

You can restrict non-admin users from creating jobs by removing their permissions to create clusters. This can be done by going to Admin Settings > User > "Allow unrestricted cluster creation" and unchecking it if enabled. You should also remove or adjust the user from clusters where they have "Can Manage" permissions and remove the required user from any cluster policy they have access to.

[Avvar2022]

@Lakshay  - Except workspace admins no other user has access to "Allow unrestricted cluster", so work around suggested is not a solution. Please let me know if i am missing something.

[Lakshay]

Hi @Avvar2022 , Do you mean to say the admin has already unchecked the box or do you mean to say other users do not have access to this option? 

[c3]

We have the "allow unrestricted cluster creation" box deselected for all groups and have users creating jobs in production so we are looking for a way to disable this.  I cannot believe this isn't an option. Did anyone find a solution for this?

[Vikaspatel]

@Lakshay  Disabling "Allow unrestricted cluster" workaround does not work as user can still create job and use job cluster in that job

[Avvar2022]

not being able to restrict creation of workflows/jobs, alerts, dashboards make platform admin job difficult to keep system clean and control cost. there is no need for data engineers to create a workflow in production. there is no need for all users to create dashboards and alerts in non-production environment. I hope databricks provides ability to restrict creation of jobs. Alerts and dashboards like clusters, tokens etc...