Hello @balajij8,

thank you for your answer.

Today I did testing with setup:

• Job Creator: GCP SA
• Job RunAs: SP
• Query Owner: Personal account
• Permissions: CAN_MANAGE for all users for both Query and Job

Both personal account and GCP SA were able to get the job output with RunAsMode.OWNER. Both got permissions error with RunAsMode.VIEWER.

Based on https://docs.databricks.com/gcp/en/security/auth/access-control/#job-acls, I would assume both should have permissions to view results.

My setup only allows me to authenticate as GCP SA, create Job with RunAs SP and create Query. That is pretty much all. And best would be to create the Query on the fly. Changing owner requires admin permissions.