cancel
Showing results forย 
Search instead forย 
Did you mean:ย 
Data Engineering
Join discussions on data engineering best practices, architectures, and optimization strategies within the Databricks Community. Exchange insights and solutions with fellow data engineers.
cancel
Showing results forย 
Search instead forย 
Did you mean:ย 

Assigning Databricks Account Admin role to User group

shweta_m
New Contributor III

Hi,

As per our company policy, individual users should not be given elevated privileges. Permissions should be assigned to user groups, so that group membership can be managed at the AD level.

In that context, is there a way to assign the 'Databricks Account Admin' role to a user group instead of individual users using OAuth or service principals?

Thanks in advance for any guidance!

1 ACCEPTED SOLUTION

Accepted Solutions

szymon_dybczak
Esteemed Contributor III

Hi @shweta_m ,

Yes, I think it's possible using REST API. You can use following endpoint which allows you to define a role membership for given group:

Create a new group. | Account Groups API | REST API reference | Databricks on AWS

View solution in original post

3 REPLIES 3

szymon_dybczak
Esteemed Contributor III

Hi @shweta_m ,

Yes, I think it's possible using REST API. You can use following endpoint which allows you to define a role membership for given group:

Create a new group. | Account Groups API | REST API reference | Databricks on AWS

shweta_m
New Contributor III

Hi @szymon_dybczak 
I tried this and it worked.
Thanks!

szymon_dybczak
Esteemed Contributor III

No problem @shweta_m , great that it worked for you ๐Ÿ™‚