MetastoreDataAccess

laktory.models.resources.databricks.MetastoreDataAccess

Bases: MetastoreDataAccessBase

Databricks Metastore Data Access

Examples:

import io

from laktory import models

dac_yaml = '''
name: prod-azure-mi
azure_managed_identity:
  access_connector_id: /subscriptions/sub-id/resourceGroups/rg/providers/Microsoft.Databricks/accessConnectors/connector
grants:
- principal: account users
  privileges:
  - READ_FILES
'''
dac = models.resources.databricks.MetastoreDataAccess.model_validate_yaml(
    io.StringIO(dac_yaml)
)

References

• Databricks Metastore Data Access

BASE	DESCRIPTION
api	Specifies whether to use account-level or workspace-level API. Valid values are account and workspace. When not set, the API level is inferred from the provider host TYPE: str | None | VariableType DEFAULT: None
aws_iam_role	TYPE: MetastoreDataAccessAwsIamRole | None | VariableType DEFAULT: None
azure_managed_identity	TYPE: MetastoreDataAccessAzureManagedIdentity | None | VariableType DEFAULT: None
azure_service_principal	TYPE: MetastoreDataAccessAzureServicePrincipal | None | VariableType DEFAULT: None
cloudflare_api_token	TYPE: MetastoreDataAccessCloudflareApiToken | None | VariableType DEFAULT: None
comment	TYPE: str | None | VariableType DEFAULT: None
databricks_gcp_service_account	TYPE: MetastoreDataAccessDatabricksGcpServiceAccount | None | VariableType DEFAULT: None
force_destroy	TYPE: bool | None | VariableType DEFAULT: None
force_update	TYPE: bool | None | VariableType DEFAULT: None
gcp_service_account_key	TYPE: MetastoreDataAccessGcpServiceAccountKey | None | VariableType DEFAULT: None
is_default	whether to set this credential as the default for the metastore. In practice, this should always be true TYPE: bool | None | VariableType DEFAULT: None
isolation_mode	TYPE: str | None | VariableType DEFAULT: None
metastore_id	TYPE: str | None | VariableType DEFAULT: None
name	TYPE: str | VariableType
owner	TYPE: str | None | VariableType DEFAULT: None
read_only	TYPE: bool | None | VariableType DEFAULT: None
skip_validation	TYPE: bool | None | VariableType DEFAULT: None

LAKTORY	DESCRIPTION
grant	Non-destructive grant for specific principal(s). Adds or updates privileges for the listed principal(s) and leaves grants for all other principals untouched. Use when access is managed from multiple sources (Laktory, Databricks UI, etc.). Mutually exclusive with grants. TYPE: StorageCredentialGrant | list[StorageCredentialGrant] | VariableType DEFAULT: None
grants	Authoritative grant list for all principals. Replaces every existing grant on this Metastore Data Access - including those set outside Laktory - with only the entries listed here. Use only when Laktory owns all access management for this resource. Mutually exclusive with grant. TYPE: list[StorageCredentialGrant | VariableType] | VariableType DEFAULT: None

ATTRIBUTE	DESCRIPTION
additional_core_resources	metastore data access credential grants TYPE: list

additional_core_resources property

• metastore data access credential grants

---

laktory.models.resources.databricks.metastoredataaccess.MetastoreDataAccessAwsIamRole

Bases: BaseModel

PARAMETER	DESCRIPTION
external_id	TYPE: str | None | VariableType DEFAULT: None
role_arn	TYPE: str | VariableType
unity_catalog_iam_arn	TYPE: str | None | VariableType DEFAULT: None

---

laktory.models.resources.databricks.metastoredataaccess.MetastoreDataAccessAzureManagedIdentity

Bases: BaseModel

PARAMETER	DESCRIPTION
access_connector_id	TYPE: str | VariableType
credential_id	TYPE: str | None | VariableType DEFAULT: None
managed_identity_id	TYPE: str | None | VariableType DEFAULT: None

---

laktory.models.resources.databricks.metastoredataaccess.MetastoreDataAccessAzureServicePrincipal

Bases: BaseModel

PARAMETER	DESCRIPTION
application_id	TYPE: str | VariableType
client_secret	TYPE: str | VariableType
directory_id	TYPE: str | VariableType

---

laktory.models.resources.databricks.metastoredataaccess.MetastoreDataAccessCloudflareApiToken

Bases: BaseModel

PARAMETER	DESCRIPTION
access_key_id	TYPE: str | VariableType
account_id	TYPE: str | VariableType
secret_access_key	TYPE: str | VariableType

---

laktory.models.resources.databricks.metastoredataaccess.MetastoreDataAccessDatabricksGcpServiceAccount

Bases: BaseModel

PARAMETER	DESCRIPTION
credential_id	TYPE: str | None | VariableType DEFAULT: None
email	TYPE: str | None | VariableType DEFAULT: None

---

laktory.models.resources.databricks.metastoredataaccess.MetastoreDataAccessGcpServiceAccountKey

Bases: BaseModel

PARAMETER	DESCRIPTION
email	TYPE: str | VariableType
private_key	TYPE: str | VariableType
private_key_id	TYPE: str | VariableType