Is it possible to generate Databricks tokens using an Azure Service Principal?

[gentresh]

Our organization has setup a databricks service on top of Azure (that is, the Azure-managed service). These are all defined with terraform. Our intention is to use an Azure service principal (with correct permissions) to be able to generate tokens, provide for github integration, and overall administrator role.

Is this a recommendation? Does anybody have any links or best-practices to share?

[Anonymous]

@Gent Reshtani​ :

Using an Azure service principal for authentication and authorization in Databricks is a common practice and a recommended approach.

Best practices and resources links

1. Azure Databricks documentation on Service Principal Authentication: https://docs.databricks.com/administration-guide/cloud-configurations/azure/service-principal-auth.h...
2. Azure Databricks blog post on Best Practices for Service Principal Authentication: https://databricks.com/blog/2020/11/04/best-practices-for-service-principal-authentication-in-azure-...
3. Azure Databricks GitHub repository for Service Principal Token Management: https://github.com/databricks/databricks-cli/tree/master/examples/service-principal-token-management
4. Azure Databricks documentation on Azure Key Vault Secrets Management: https://docs.databricks.com/security/secrets/azure-key-vault-secrets.html

[Anonymous]

Hi @Gent Reshtani​ 

Hope everything is going great.

Just wanted to check in if you were able to resolve your issue. If yes, would you be happy to mark an answer as best so that other members can find the solution more quickly? If not, please tell us so we can help you. 

Cheers!