customer is trying to generate a Databricks token for a service principal (SP). They’ve created the SP in Azure AD and have used the Databricks rest ...

[User16270906190]

customer is trying to generate a Databricks token for a service principal (SP). They’ve created the SP in Azure AD and have used the Databricks rest api to add it as an admin.

When using the Databricks rest api /api/2.0/token-management/on-behalf-of/tokens to create a token for this SP, I get this error, {"error_code":"FEATURE_DISABLED","message":"On-behalf-of token creation for service principals is not enabled for this workspace"}. What's confusing is that personal access tokens are enabled and I've even gone to the extent to manually add the SP to these permissions. I'm not sure what setting I can change in Databricks to enable this feature. Any help would be greatly appreciated.

[User16752239289]

Are you running the API against an Azure workspace?

The API endpoint is not supported on Azure workspace now.

Could you let me know your use case so that I can understand why do you want to run api/2.0/token-management/on-behalf-of/tokens

[niburg123]

We would also like to have this feature - e.g. to separate personal tokens and general tokens which are used e.g. for a tableau - to sql endpoint connection.

[lucab]

Is there a chance two have a similar feature in Azure workspace? We would like to generate a token for a SP that need to access to Databricks SQL Endpoint through an Azure Function.

[databass]

how are we supposed to set up SCIM provisioning if we can't generate a token for a service principle? Please can you specify when this function will be available

[safonov]

Could you please provide with some information so that it could be possible to track the progress on this feature?

[User16764241763]

Could you please refer to this documentation?

https://docs.microsoft.com/en-us/azure/databricks/dev-tools/api/latest/aad/service-prin-aad-token

[nnutss]

i followed the above recommendations but still getting "FEATURE_DISABLED","message":"On-behalf-of token creation for service principals is not enabled for this workspace"}

Any help would be greatly appreciated

[Buxert]

Having the same problem here. @Nitisha Nigam​ did you solve it?