cancel
Showing results for 
Search instead for 
Did you mean: 
Data Engineering
Join discussions on data engineering best practices, architectures, and optimization strategies within the Databricks Community. Exchange insights and solutions with fellow data engineers.
cancel
Showing results for 
Search instead for 
Did you mean: 

Databricks shared folder area permissions issue

eballinger
Contributor

We have some notebook code that I would like to share with our team only in the "shared folder" area of Databricks. I know by default this area is meant as a area to share stuff with the entire organization but from what I have read you should be able to override this security to create your own security. 

So when I create a new folder how can I override the security for that folder under Workspace -> Shared -> My Teams Folder? When I view the permissions on the new folder I can see "All workspace users" have the inherited permission of "Can Manage (inherited)"  and there is no option to remove them which is of course not what I want.

How can I create a team folder in the shared area?

Thanks
Eddie

 

1 ACCEPTED SOLUTION

Accepted Solutions

Isi
Honored Contributor II

Hello @eballinger 

In Databricks, the users group (sometimes shown in the UI as All workspace users) has default permissions that cannot be revoked at the top-level Shared folder. Docs

So looks like:

  • It’s not possible to create a folder under /Shared that is restricted only to a team by removing All workspace users.

  • Any new folder created under /Shared will always inherit “Can Manage” for the users group.

If you want a team-only folder, you’ll need to create it outside /Shared (e.g., under /Workspace/<Team Folder>)

Hope this helps 🙂

Isi

View solution in original post

2 REPLIES 2

Isi
Honored Contributor II

Hello @eballinger 

In Databricks, the users group (sometimes shown in the UI as All workspace users) has default permissions that cannot be revoked at the top-level Shared folder. Docs

So looks like:

  • It’s not possible to create a folder under /Shared that is restricted only to a team by removing All workspace users.

  • Any new folder created under /Shared will always inherit “Can Manage” for the users group.

If you want a team-only folder, you’ll need to create it outside /Shared (e.g., under /Workspace/<Team Folder>)

Hope this helps 🙂

Isi

Thanks for the quick reply. Your suggestion is perfect. I did not know you could do that but its exactly what I wanted.