Is it possible to add a Databricks Role/Group to appRoles for OAuth 2.0(Azure AD) tokens

Mukil Rajeev 1 Reputation point
2020-09-09T11:48:28.817+00:00

I have configured a service principal for Azure Databricks in Azure AD as per this documentation: https://learn.microsoft.com/en-us/azure/databricks/dev-tools/api/latest/aad/service-prin-aad-token

I am able to access Azure Databricks using an OAuth 2.0(Azure AD Access token) generated as per the above and access the data within the databricks cluster using this token.

However, I want to figure out if its possible to tie a Databricks Role/Group(if such a thing exists) for managing table and column level access as per : https://learn.microsoft.com/en-us/azure/databricks/security/access-control/table-acls/object-privileges#data-governance-model

If this is possible, I want to add the role/group to appRoles in the Service Principal's Manifest which can tie it to the OAuth 2.0 role claim as per: https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-add-app-roles-in-azure-ad-apps

Does the above seem possible? The primary concern I have is that Databricks does not seem to have any roles that can be used to assign permissions. It does seem to have groups, but, I'm not sure if those can be added as appRoles.

Azure Databricks
Azure Databricks
An Apache Spark-based analytics platform optimized for Azure.
2,037 questions
{count} votes