Skip to main content

permissions

Creates, updates, deletes, gets or lists a permissions resource.

Overview

Namepermissions
TypeResource
Iddatabricks_workspace.apps.permissions

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
object_idstring
access_control_listarray
object_typestring

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getpermissionsselectdeployment_nameGets the permissions of an app. Apps can inherit permissions from their root object.
updatepermissionsupdatedeployment_nameUpdates the permissions on an app. Apps can inherit permissions from their root object.
setpermissionsreplacedeployment_nameSets permissions on an object, replacing existing permissions if they exist. Deletes all direct permissions if none are specified. Objects can inherit permissions from their root object.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
deployment_namestringThe Databricks Workspace Deployment Name (default: dbc-abcd0123-a1bc)

SELECT examples

Gets the permissions of an app. Apps can inherit permissions from their root object.

SELECT
object_id,
access_control_list,
object_type
FROM databricks_workspace.apps.permissions
WHERE deployment_name = '{{ deployment_name }}' -- required;

UPDATE examples

Updates the permissions on an app. Apps can inherit permissions from their root object.

UPDATE databricks_workspace.apps.permissions
SET
data__access_control_list = '{{ access_control_list }}'
WHERE
deployment_name = '{{ deployment_name }}' --required
RETURNING
object_id,
access_control_list,
object_type;

REPLACE examples

Sets permissions on an object, replacing existing permissions if they exist. Deletes all direct permissions if none are specified. Objects can inherit permissions from their root object.

REPLACE databricks_workspace.apps.permissions
SET
data__access_control_list = '{{ access_control_list }}'
WHERE
deployment_name = '{{ deployment_name }}' --required
RETURNING
object_id,
access_control_list,
object_type;