workspace_assignment_details

Creates, updates, deletes, gets or lists a workspace_assignment_details resource.

Overview

Name	workspace_assignment_details
Type	Resource
Id	databricks_account.iamv2.workspace_assignment_details

Fields

The following fields are returned by SELECT queries:

get

Name	Datatype	Description
account_id	string	The account ID parent of the workspace where the principal is assigned
principal_id	integer	The internal ID of the principal (user/sp/group) in Databricks.
workspace_id	integer	The workspace ID where the principal is assigned
effective_entitlements	array	The principal's full effective entitlements granted in this workspace: every entitlement it holds whether granted directly or via group membership. Populated on Get; empty on List.
entitlements	array	Entitlements granted directly to the principal on this workspace. The only client-settable field: create and update manage exactly this set (including entitlements the principal also holds via a group). Not populated by ListWorkspaceAssignmentDetails (omitted for scalability); call GetWorkspaceAssignmentDetail to read the entitlements for a single principal.
principal_type	string	The type of the principal (user/sp/group). (GROUP, SERVICE_PRINCIPAL, USER)

list

Name	Datatype	Description
account_id	string	The account ID parent of the workspace where the principal is assigned
principal_id	integer	The internal ID of the principal (user/sp/group) in Databricks.
workspace_id	integer	The workspace ID where the principal is assigned
effective_entitlements	array	The principal's full effective entitlements granted in this workspace: every entitlement it holds whether granted directly or via group membership. Populated on Get; empty on List.
entitlements	array	Entitlements granted directly to the principal on this workspace. The only client-settable field: create and update manage exactly this set (including entitlements the principal also holds via a group). Not populated by ListWorkspaceAssignmentDetails (omitted for scalability); call GetWorkspaceAssignmentDetail to read the entitlements for a single principal.
principal_type	string	The type of the principal (user/sp/group). (GROUP, SERVICE_PRINCIPAL, USER)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get	select	account_id, workspace_id, principal_id		Returns the assignment details for a principal in a workspace.
list	select	account_id, workspace_id	page_size, page_token	Lists workspace assignment details for a workspace. For scalability, the response omits the
create	insert	account_id, workspace_id, workspace_assignment_detail		Creates a workspace assignment detail for a principal. Entitlement grants are applied individually and
update	update	account_id, workspace_id, principal_id, update_mask, workspace_assignment_detail		Updates the entitlements of a directly assigned principal in a workspace. Entitlement changes are
delete	delete	account_id, workspace_id, principal_id		Deletes a workspace assignment detail for a principal, revoking all associated entitlements.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
account_id	string
principal_id	integer	Required. ID of the principal in Databricks to delete workspace assignment for.
update_mask	object	Required. The list of fields to update.
workspace_id	integer	The workspace ID where the principal has access.
page_size	integer	The maximum number of workspace assignment details to return. The service may return fewer than this value.
page_token	string	A page token, received from a previous ListWorkspaceAssignmentDetails call. Provide this to retrieve the subsequent page.

SELECT examples

get

Returns the assignment details for a principal in a workspace.

SELECT
account_id,
principal_id,
workspace_id,
effective_entitlements,
entitlements,
principal_type
FROM databricks_account.iamv2.workspace_assignment_details
WHERE account_id = '{{ account_id }}' -- required
AND workspace_id = '{{ workspace_id }}' -- required
AND principal_id = '{{ principal_id }}' -- required
;

list

Lists workspace assignment details for a workspace. For scalability, the response omits the

SELECT
account_id,
principal_id,
workspace_id,
effective_entitlements,
entitlements,
principal_type
FROM databricks_account.iamv2.workspace_assignment_details
WHERE account_id = '{{ account_id }}' -- required
AND workspace_id = '{{ workspace_id }}' -- required
AND page_size = '{{ page_size }}'
AND page_token = '{{ page_token }}'
;

INSERT examples

create

Creates a workspace assignment detail for a principal. Entitlement grants are applied individually and

INSERT INTO databricks_account.iamv2.workspace_assignment_details (
workspace_assignment_detail,
account_id,
workspace_id
)
SELECT 
'{{ workspace_assignment_detail }}' /* required */,
'{{ account_id }}',
'{{ workspace_id }}'
RETURNING
account_id,
principal_id,
workspace_id,
effective_entitlements,
entitlements,
principal_type
;

Manifest

# Description fields are for documentation purposes
- name: workspace_assignment_details
props:
  - name: account_id
    value: "{{ account_id }}"
    description: Required parameter for the workspace_assignment_details resource.
  - name: workspace_id
    value: {{ workspace_id }}
    description: Required parameter for the workspace_assignment_details resource.
  - name: workspace_assignment_detail
    description: |
      Required. Workspace assignment detail to be created in <Databricks>.
    value:
      principal_id: {{ principal_id }}
      account_id: "{{ account_id }}"
      effective_entitlements:
        - "{{ effective_entitlements }}"
      entitlements:
        - "{{ entitlements }}"
      principal_type: "{{ principal_type }}"
      workspace_id: {{ workspace_id }}

UPDATE examples

update

Updates the entitlements of a directly assigned principal in a workspace. Entitlement changes are

UPDATE databricks_account.iamv2.workspace_assignment_details
SET 
workspace_assignment_detail = '{{ workspace_assignment_detail }}'
WHERE 
account_id = '{{ account_id }}' --required
AND workspace_id = '{{ workspace_id }}' --required
AND principal_id = '{{ principal_id }}' --required
AND update_mask = '{{ update_mask }}' --required
AND workspace_assignment_detail = '{{ workspace_assignment_detail }}' --required
RETURNING
account_id,
principal_id,
workspace_id,
effective_entitlements,
entitlements,
principal_type;

DELETE examples

delete

Deletes a workspace assignment detail for a principal, revoking all associated entitlements.

DELETE FROM databricks_account.iamv2.workspace_assignment_details
WHERE account_id = '{{ account_id }}' --required
AND workspace_id = '{{ workspace_id }}' --required
AND principal_id = '{{ principal_id }}' --required
;