Skip to main content

app_permissions

Creates, updates, deletes, gets or lists an app_permissions resource.

Overview

Nameapp_permissions
TypeResource
Iddatabricks_workspace.apps.app_permissions

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
object_idstring
access_control_listarray
object_typestring

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectapp_name, deployment_nameGets the permissions of an app. Apps can inherit permissions from their root object.
updateupdateapp_name, deployment_nameUpdates the permissions on an app. Apps can inherit permissions from their root object.
setreplaceapp_name, deployment_nameSets permissions on an object, replacing existing permissions if they exist. Deletes all direct

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
app_namestringThe app for which to get or manage permissions.
deployment_namestringThe Databricks Workspace Deployment Name (default: dbc-abcd0123-a1bc)

SELECT examples

Gets the permissions of an app. Apps can inherit permissions from their root object.

SELECT
object_id,
access_control_list,
object_type
FROM databricks_workspace.apps.app_permissions
WHERE app_name = '{{ app_name }}' -- required
AND deployment_name = '{{ deployment_name }}' -- required
;

UPDATE examples

Updates the permissions on an app. Apps can inherit permissions from their root object.

UPDATE databricks_workspace.apps.app_permissions
SET
access_control_list = '{{ access_control_list }}'
WHERE
app_name = '{{ app_name }}' --required
AND deployment_name = '{{ deployment_name }}' --required
RETURNING
object_id,
access_control_list,
object_type;

REPLACE examples

Sets permissions on an object, replacing existing permissions if they exist. Deletes all direct

REPLACE databricks_workspace.apps.app_permissions
SET
access_control_list = '{{ access_control_list }}'
WHERE
app_name = '{{ app_name }}' --required
AND deployment_name = '{{ deployment_name }}' --required
RETURNING
object_id,
access_control_list,
object_type;