Override partner OAuth token lifetime policy

This page describes how to override the OAuth token lifetime policy for existing partner OAuth applications.

To configure single-use refresh tokens for enhanced security, see Single-use refresh tokens.

Note

Updates to partner OAuth applications can take 30 minutes to process.

Before you begin

Before you override the OAuth token lifetime policy, do the following:

• Install the Databricks CLI and set up authentication between the Databricks CLI and your Databricks account.

• Locate your account ID.

• Locate the integration ID of the OAuth application you want to modify.

  • For dbt Core, Power BI, Tableau Desktop, or Tableau Cloud, run the following command:

  databricks account published-app-integration list
  

  • For Tableau Server, run the following command:

  databricks account custom-app-integration list
  

  The unique integration ID for each OAuth application is returned.

Override the default token lifetime policy for dbt Core, Power BI, Tableau Desktop, or Tableau Cloud

To override the default token lifecycle policy (token_access_policy) for dbt Core, Power BI, Tableau Desktop, or Tableau Cloud, run the following command:

databricks account published-app-integration update <integration-id> --json '{"token_access_policy": {"access_token_ttl_in_minutes": <new-access-token-ttl>,"refresh_token_ttl_in_minutes":<new-refresh-token-ttl>}}'

• Replace <integration-id> with the integration ID for your OAuth application. For example, c1b137c2-b832-1abc-ad12-995a0209e213.
• Replace <new-access-token-ttl> with the new access token lifetime.
• Replace <new-refresh-token-ttl> with the new refresh token lifetime.

Override the default token lifetime policy for Tableau Cloud or Tableau Server

To override the default token lifecycle policy (token_access_policy) for Tableau Cloud or Tableau Server, run the following command:

databricks account custom-app-integration update <integration-id> --json '{"token_access_policy": {"access_token_ttl_in_minutes": <new-access-token-ttl>,"refresh_token_ttl_in_minutes":<new-refresh-token-ttl>}}'

• Replace <integration-id> with the integration ID of the OAuth application you want to modify.
• Replace <new-access-token-ttl> with the new access token lifetime.
• Replace <new-refresh-token-ttl> with the new refresh token lifetime.