user assigned identity being created in databricks

Question

I am creating databricks workspace using bicep and notice that a user assigned managed identity is being created alongside the managed storage account. What is this for?

Answer 1

Hello @Crisjay Tomas ,

Thanks for the question and using MS Q&A platform.

Does your main.bicep contains creation of the managed identity? If you unable to find these details in the bicep file - please do share the bicep file configuration.

As per the repro from my end, I had used the Quickstart: Create an Azure Databricks workspace using Bicep which creates only databricks workspace.

Every databricks workspace contains a Managed resource group databricks-rg-chepraadb-wkkixrswwykci which contains (Storage Account, Network Security Group and Virtual Network) as shown below.

Hope this will help. Please let us know if any further queries.

------------------------------

• Please don't forget to click on or upvote button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how
• Want a reminder to come back and check responses? Here is how to subscribe to a notification
• If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators

Answer 2

Hi @PRADEEPCHEEKATLA ,

This is what my main.bicep look like

// ------------ parameters -----------
@description('The resource name')
param databricksWorkspaceName string

@description('The resource location')
param location string

@description('The resource location')
param dbwPricingTier string

@description('The managed resource group Id.')
param managedResourceGroupName string

@description('The name of the Private Subnet within the Virtual Network')
param dbwPrivateSubnetName string

@description('The name of a Public Subnet within the Virtual Network')
param dbwPublicSubnetName string

@description('The ID of a Virtual Network where this Databricks Cluster')
param dbwVirtualNetworkName string

@description('Default DBFS storage account name.')
param dbwstorageAccountName string

@description('tags for resources')
param tags object

// ------------ variables ------------
var dbwVnetID = resourceId('Microsoft.Network/virtualNetworks', dbwVirtualNetworkName)

// ------------ deployments -----------
resource databricksWorkspace 'Microsoft.Databricks/workspaces@2022-04-01-preview' = {
name: databricksWorkspaceName
location: location
tags: tags
sku: {
name: dbwPricingTier
}
properties: {
managedResourceGroupId: subscriptionResourceId('Microsoft.Resources/resourceGroups', managedResourceGroupName)
parameters: {
customPrivateSubnetName: {
value: dbwPrivateSubnetName
}
customPublicSubnetName: {
value: dbwPublicSubnetName
}
customVirtualNetworkId: {
value: dbwVnetID
}
enableNoPublicIp: {
value: true
}
prepareEncryption: {
value: false
}
storageAccountName: {
value: dbwstorageAccountName
}
storageAccountSkuName: {
value: 'Standard_LRS'
}
}
}
}

// ------------ output ----------------
output databricksWorkspaceID string = databricksWorkspace.id

output databaricksWorkspaceURL string = databricksWorkspace.properties.workspaceUrl

Answer 3

Hi @PRADEEPCHEEKATLA

Thanks for answering however may I know what's this for? or is it safe to remove especially for storage account?