- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
Hi Community,
I have a Databricks account and workspaces that were previously setup by a user who is no longer with our company and I am attempting to remove admin access and deactive the user account. However as an Account admin user myself, when I attempt to use the API to patch the user, I get `Not allowed to activate or deactivate user` and when I attempt to remove the Account admin role I also get - `PERMISSION_DENIED: Cannot remove roles`.
Any suggestions on how to deactive this user? Are there ownerships that I need to transfer first?
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
Hi @alpines ,
This error typically occurs when attempting to remove the 'account owner.' The account owner is the user who originally set up the Databricks account. This entitlement is attached to a user so that there is always at least one account admin who can authenticate if all other admins are removed. You can create a support case with Databricks to request that the account ownership entitlement be transferred to another user and then remove this user.
This is also described in following place in documentation:
Manage your Databricks account | Databricks on AWS
If my answer was helpful, please consider marking it as accepted solution.
