Share workspace objects using folders

This article describes how to share folders with users, groups, and service principals in your workspace.

Note

Access control is available only in the Premium plan.

Folder permissions

You can manage permissions to workspace objects directly or by organizing objects into folders. Objects in a folder inherit all permissions settings of that folder. For example, a user that has Can Run permission on a folder has Can Run permission on the queries in that folder. A user has the same permission for all items in a folder, including new items created or moved into the folder.

You can assign five permission levels to folders: No Permissions, Can Read, Can Edit, Can Run, and Can Manage. The table lists the abilities for each permission.

Ability	No Permissions	Can Read	Can Edit	Can Run	Can Manage
List objects in folder	x	x	x	x	x
View objects in folder		x	x	x	x
Clone and export items			x	x	x
Run objects in the folder				x	x
Create, import, and delete items					x
Move and rename items					x
Modify permissions					x

Workspace admins have the Can Manage permission on all folders in their workspace. Users automatically have the Can Manage permission for folders they create.

Special folders and permissions

An Azure Databricks workspace has three special folders: Workspace, Shared, and Users homes folders with the following default permissions:

• Only workspace admins can create objects in the Workspace root folder.
• All users have the Can Manage permission for objects in the Workspace > Shared folder.
• The user has the Can Manage permission on their home folder. All other users have the No Permissions permission.

For more information on special folders, see Special folders.

Configure folder permissions

This section describes how to manage permissions using the workspace UI. You can also use the Permissions API or Databricks Terraform provider.

You must have at least Can Manage permission on a folder to configure folder permissions.

1. Open a folder.

2. Click Share. The Sharing dialog appears.

3. Search for and select the groups, users, and service principals, and assign the permission level.

   

4. Click Add.

You can also copy the link to the folder.