Add Service principal (Azure AD Application) to Databricks

  1. Create a group "protecto_group" in databricks.

  2. Add service principal which was created in step 1 with the display name "protecto_user". Reference link: Adding Service Principal to databricks.

  3. Add "protecto_user" to the "protecto_group

List of accesses needed in Databricks:

  • Grant "SELECT", "USAGE", “READ_METADATA” privilege for all catalogs, databases (or schemas) and tables for "protecto_group".

  • Create medium sized sql warehouse for Protecto and give "can manage" permission for "protecto_group".

  • Grant “can manage” permission to “protecto_group” in all SQL warehouses on which the Protecto application needs to analyze. This is required to retrieve access logs (audit logs).

PreviousDatabricksNextSteps to create Azure Databricks Cluster

Last updated