Hello @Prasad_Koneru 

 If the command is not updating the privileges as expected, there could be a few reasons for this. 

Firstly, ensure that the JSON file is correctly formatted and contains the correct privilege assignments. The privileges.json file should look something like this:

{
  "privilege_assignments": [
    {
      "principal": "principal_name",
      "privileges": [
        "USE_CATALOG"
      ]
    }
  ]
}

Replace "principal_name" with the actual principal (user or group) to which you want to grant the privilege.

Secondly, make sure that you have the necessary permissions to update the privileges. If you don't have the required permissions, the command might not execute as expected.

Lastly, there could be an issue with the Databricks CLI itself. Ensure that you're using the latest version of the CLI and that it's correctly configured.

Hi, 

I am having a similar issue when trying to update grants for my external location and trying to grant all privileges to "ml" service principal. 

Running on Windows with version Databricks CLI v0.223.1

This is the command I'm running in the CLI

databricks grants update external-location mdct_bronze --json @"filepath\privileges.json"

This is what the privileges.json file looks like 

{
  "privilege_assignments": [
    {
      "principal": "ml",
      "privileges": [
        "ALL_PRIVILEGES"
      ]
    }
  ]
}

The only output I'm receiving when running the command is 

{}

However, when I update the privileges from the UI and run 

databricks grants get external-location mdct_bronze --principal ml

 I receive the following output

{
  "privilege_assignments": [
    {
      "principal":"ml",
      "privileges": [
        "ALL_PRIVILEGES"
      ]
    }
  ]
}

 Is there something wrong with the json configuration? 

If someone needs this in the future, like I did.

The issue is with your JSON structure. The Databricks CLI uses "changes" with "add" instead of "privilege_assignments" with "privileges".

{
  "changes": [
    {
      "principal": "mailid",
      "add": [
        "USE_CATALOG"
      ]
    }
  ]
}

To remove the old ALL_PRIVILEGES first:

{
  "changes": [
    {
      "principal": "mailid",
      "remove": [
        "ALL_PRIVILEGES"
      ],
      "add": [
        "USE_CATALOG"
      ]
    }
  ]
}

Then run:

databricks grants update catalog demo_cat --json @privileges.json  

 Verify the changes:

databricks grants get catalog demo_cat

 The key difference is using "changes" array with "add"/"remove" actions instead of "privilege_assignments" with "privileges".