Is Azure AD Conditional Access also possible for the Databricks Account Console?

[Hansjoerg]

I wonder whether conditional access in Azure AD for Databricks (https://learn.microsoft.com/en-us/azure/databricks/administration-guide/access-control/conditional-access?source=docs) can be configured separately for the account console (https://accounts.azuredatabricks.net/).

Since the accounts console is highly privileged, it would make sense that, for instance, multi factor authentication is always necessary.

[Anonymous · Accepted solution]

@Hansjörg Wingeier​ :

Yes, it is possible to configure conditional access separately for the Databricks accounts console. The accounts console is a web-based interface that allows users to manage their Databricks account, including their user profile, workspace settings, and billing information.

To configure conditional access for the accounts console, you can create a new conditional access policy in Azure AD and specify the target application as "Databricks - Accounts Console" (you can find this application in the Azure AD Enterprise applications list). You can then configure the policy to require multi-factor authentication or other access controls as necessary.

Note that configuring conditional access for the accounts console does not automatically apply to other Databricks resources, such as notebooks or clusters. You will need to configure separate conditional access policies for these resources if needed.

[Anonymous]

Hi @Hansjörg Wingeier​ 

Thank you for posting your question in our community! We are happy to assist you.

To help us provide you with the most accurate information, could you please take a moment to review the responses and select the one that best answers your question?

This will also help other community members who may have similar questions in the future. Thank you for your participation and let us know if you need any further assistance!