How to make your Service Principal or Group Workspace admin?

[Walter_C]

Do you require for a Service Principal or a Group to have admin rights to allow automation or reduce the efforts in the process of adding the permission to each user.

Solution

For Service Principals:

1. You need to be at least Workspace Admin
2. You can either create a Service Principal in the workspace (any workspace) or assign an Account Console Service Principal (Unity Catalog workspace only). You can refer to Manage Service Principals for the creation process.
3. Once you have your existing or newly created SP assigned to your workspace navigate to Settings > Identity and Access > Groups.
4. Search for a group called admins and add your SP as a member of this group.
5. This will automatically inherit permissions on SP.

For Groups:

1. You need to be Account Console admin
2. Your workspace needs to be Unity Catalog enabled.
3. Go to the Account Console URL:
1. AWS: accounts.cloud.databricks.com
2. AZURE: accounts.azuredatabricks.net
3. GCP: accounts.gcp.databricks.com
4. Go to User Management > Groups and create or sync your desired group.
5. Go to Workspaces and search for the workspace you want to add, click on the name to see workspace details.
6. Under Permissions click add permission, look for the desired group and add the admin role.
7. This will add your group on the admins group on your workspace and will inherit the workspace admin permissions.