Hi,

As per our company policy, individual users should not be given elevated privileges. Permissions should be assigned to user groups, so that group membership can be managed at the AD level.

In that context, is there a way to assign the 'Databricks Account Admin' role to a user group instead of individual users using OAuth or service principals?

Thanks in advance for any guidance!