To query all users who have access to a Databricks workspace, you can follow these steps:

1. Check Workspace Users via Admin Console

• If you are a workspace admin, navigate to the Admin Console in the Databricks UI. Under the "Users" tab, you can view all users who have been added to the workspace and their roles (e.g., workspace admin, user, or service principal).

2. List Users via SCIM API

• Use the Databricks SCIM API to programmatically retrieve a list of users in the workspace. For example:

   

  bash

  curl -X GET \ -H "Authorization: Bearer <your-access-token>" \ https://<databricks-instance>/api/2.0/preview/scim/v2/Users

  This will return a JSON object containing user details, including their roles and group memberships.

3. Check Default Privileges in Unity Catalog

• By default, all workspace users receive certain privileges (e.g., USE CATALOG) on the default schema of the Unity Catalog metastore. You can query these privileges using:

   

  sql

  SHOW GRANTS ON CATALOG default;

  This will display all users and groups with access to the default catalog.

4. Audit Logs for User Activity

• If you need to verify which users have accessed specific data or performed actions in the workspace, enable and review audit logs. These logs can provide detailed insights into user activities across the workspace37.

By combining these methods, you can comprehensively identify all users who have access to your Databricks workspace and their respective roles or privileges.

Here are some additional resources/documentation that might be helpful:

• https://docs.databricks.com/aws/en/admin/users-groups/users
• https://docs.databricks.com/aws/en/data-governance/unity-catalog/manage-privileges/privileges
• https://docs.databricks.com/api/workspace/users/list