@BlakeWaverly  I don't see cluster and job read access, Can you please share where can I find these. though I can assign this service principal to a specific cluster/job as CAN_VIEW but I want to add Read permission on workspace level.