databricksgrouprole Resource

API Documentation

This resource allows you to attach a role to databricks_group. This role could be a pre-defined role such as account admin, or an instance profile ARN.

-> This resource can be used with an account or workspace-level provider.

Example Usage

Attach an instance profile to a group

resource "databricks_instance_profile" "instance_profile" {
  instance_profile_arn = "my_instance_profile_arn"
}

resource "databricks_group" "my_group" {
  display_name = "my_group_name"
}

resource "databricks_group_role" "my_group_instance_profile" {
  group_id = databricks_group.my_group.id
  role     = databricks_instance_profile.instance_profile.id
}

Attach account admin role to an account-level group

provider "databricks" {
  host          = "https://accounts.cloud.databricks.com"
  account_id    = var.databricks_account_id
  client_id     = var.client_id
  client_secret = var.client_secret
}

resource "databricks_group" "my_group" {
  display_name = "my_group_name"
}

resource "databricks_group_role" "my_group_account_admin" {
  group_id = databricks_group.my_group.id
  role     = "account_admin"
}

Argument Reference

The following arguments are supported:

• group_id - (Required) This is the id of the group resource.
• role - (Required) Either a role name or the ARN/ID of the instance profile resource.
• api - (Optional) Specifies whether to use account-level or workspace-level API. Valid values are account and workspace. When not set, the API level is inferred from the provider host.

Attribute Reference

In addition to all arguments above, the following attributes are exported:

• id - The id for the databricks_group_role object which is in the format <group_id>|<role>.

Import

!> Importing this resource is not currently supported.

Related Resources

The following resources are often used in the same context:

• End to end workspace management guide.
• databricks_aws_bucket_policy data to configure a simple access policy for AWS S3 buckets, so that Databricks can access data in it.
• databricks_cluster_policy to create a databricks_cluster policy, which limits the ability to create clusters based on a set of rules.
• databricks_group to manage Account-level or Workspace-level groups.
• databricks_group data to retrieve information about databricks_group members, entitlements and instance profiles.
• databricks_group_member to attach users and groups as group members.
• databricks_instance_pool to manage instance pools to reduce cluster start and auto-scaling times by maintaining a set of idle, ready-to-use instances.
• databricks_instance_profile to manage AWS EC2 instance profiles that users can launch databricks_cluster and access data, like databricks_mount.
• databricks_user_instance_profile to attach databricks_instance_profile (AWS) to databricks_user.