Share workspace objects using folders
This article describes how to share folders with users, groups, and service principals in your workspace.
Access control is available only in the Premium plan.
You can manage permissions to workspace objects directly or by organizing objects into folders. Objects in a folder inherit all permissions settings of that folder. For example, a user that has Can Run permission on a folder has Can Run permission on the queries in that folder. A user has the same permission for all items in a folder, including new items created or moved into the folder.
You can assign five permission levels to folders: No Permissions, Can Read, Can Edit, Can Run, and Can Manage. The table lists the abilities for each permission.
|Ability||No Permissions||Can Read||Can Edit||Can Run||Can Manage|
|List objects in folder||x||x||x||x||x|
|View objects in folder||x||x||x||x|
|Clone and export items||x||x||x|
|Run objects in the folder||x||x|
|Create, import, and delete items||x|
|Move and rename items||x|
Workspace admins have the Can Manage permission on all folders in their workspace. Users automatically have the Can Manage permission for folders they create.
Special folders and permissions
An Azure Databricks workspace has three special folders: Workspace, Shared, and Users homes folders with the following default permissions:
- Only workspace admins can create objects in the Workspace root folder.
- All users have the Can Manage permission for objects in the Workspace > Shared folder.
- The user has the Can Manage permission on their home folder. All other users have the No Permissions permission.
For more information on special folders, see Special folders.
Configure folder permissions
You must have at least Can Manage permission on a folder to configure folder permissions.
Open a folder.
Click Share. The Sharing dialog appears.
Search for and select the groups, users, and service principals, and assign the permission level.
You can also copy the link to the folder.