Entitlements

laktory.models.resources.databricks.Entitlements

Bases: EntitlementsBase

Databricks Entitlements

This resource allows you to set entitlements to existing users, groups or service principals. You must define entitlements of a principal using either Entitlements or directly within one of User, Group or ServicePrincipal. Having entitlements defined in both resources will result in non-deterministic behaviour.

Examples:

import io

from laktory import models

entitlements_yaml = '''
user_id: ${resources.user-john.id}
allow_cluster_create: true
allow_instance_pool_create: true
databricks_sql_access: true
workspace_access: true
'''
entitlements = models.resources.databricks.Entitlements.model_validate_yaml(
    io.StringIO(entitlements_yaml)
)

References

• Databricks Entitlements

BASE	DESCRIPTION
allow_cluster_create	Allow the principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with databricks_permissions and cluster_id argument. Everyone without allow_cluster_create argument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy TYPE: bool | None | VariableType DEFAULT: None
allow_instance_pool_create	Allow the principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with databricks_permissions and instance_pool_id argument TYPE: bool | None | VariableType DEFAULT: None
databricks_sql_access	This is a field to allow the principal to have access to Databricks SQL UI, Databricks One and through databricks_sql_endpoint TYPE: bool | None | VariableType DEFAULT: None
group_id	Canonical unique identifier for the group TYPE: str | None | VariableType DEFAULT: None
service_principal_id	Canonical unique identifier for the service principal TYPE: str | None | VariableType DEFAULT: None
user_id	Canonical unique identifier for the user TYPE: str | None | VariableType DEFAULT: None
workspace_access	This is a field to allow the principal to have access to a Databricks Workspace UI and Databricks One TYPE: bool | None | VariableType DEFAULT: None
workspace_consume	This is a field to allow the principal to have access only to Databricks One. Couldn't be used with workspace_access or databricks_sql_access TYPE: bool | None | VariableType DEFAULT: None