We're using a setup where we use gitlab ci to deploy workflows using a service principal, using the Jobs API (2.1) https://docs.databricks.com/dev-tools/api/latest/jobs.html#operation/JobsCreate

When we wanted to reduce permissions of the ci to minimum privileges, it looks like it actually needs to be admin in the workspace to create jobs. Can that really be the case?

This is the error that we got

requests.exceptions.HTTPError: 403 Client Error: Forbidden for url: https://adb-000000000000000.00.azuredatabricks.net/api/2.1/jobs/create

 Response from server: 

 { 'error_code': 'PERMISSION_DENIED',

 'message': 'User d2e55b97-c94a-4ba0-b11f-872bc4873fa8 is not a workspace '

       'admin'}