Skip to main content

object_permissions

Creates, updates, deletes, gets or lists an object_permissions resource.

Overview

Nameobject_permissions
TypeResource
Iddatabricks_workspace.workspace.object_permissions

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
object_idstring
access_control_listarray
object_typestring

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectworkspace_object_type, workspace_object_id, deployment_nameGets the permissions of a workspace object. Workspace objects can inherit permissions from their
updateupdateworkspace_object_type, workspace_object_id, deployment_nameUpdates the permissions on a workspace object. Workspace objects can inherit permissions from their
setreplaceworkspace_object_type, workspace_object_id, deployment_nameSets permissions on an object, replacing existing permissions if they exist. Deletes all direct

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
deployment_namestringThe Databricks Workspace Deployment Name (default: dbc-abcd0123-a1bc)
workspace_object_idstringThe workspace object for which to get or manage permissions.
workspace_object_typestringThe workspace object type for which to get or manage permissions. Could be one of the following: alerts, alertsv2, dashboards, dbsql-dashboards, directories, experiments, files, genie, notebooks, queries

SELECT examples

Gets the permissions of a workspace object. Workspace objects can inherit permissions from their

SELECT
object_id,
access_control_list,
object_type
FROM databricks_workspace.workspace.object_permissions
WHERE workspace_object_type = '{{ workspace_object_type }}' -- required
AND workspace_object_id = '{{ workspace_object_id }}' -- required
AND deployment_name = '{{ deployment_name }}' -- required
;

UPDATE examples

Updates the permissions on a workspace object. Workspace objects can inherit permissions from their

UPDATE databricks_workspace.workspace.object_permissions
SET
access_control_list = '{{ access_control_list }}'
WHERE
workspace_object_type = '{{ workspace_object_type }}' --required
AND workspace_object_id = '{{ workspace_object_id }}' --required
AND deployment_name = '{{ deployment_name }}' --required
RETURNING
object_id,
access_control_list,
object_type;

REPLACE examples

Sets permissions on an object, replacing existing permissions if they exist. Deletes all direct

REPLACE databricks_workspace.workspace.object_permissions
SET
access_control_list = '{{ access_control_list }}'
WHERE
workspace_object_type = '{{ workspace_object_type }}' --required
AND workspace_object_id = '{{ workspace_object_id }}' --required
AND deployment_name = '{{ deployment_name }}' --required
RETURNING
object_id,
access_control_list,
object_type;