Needed files

...

The following provides a comprehensive guide to understanding and utilizing the capabilities of the Azure Function for LHO Permissions setup script within your Azure environment.

The service principal used by LHO requires permissions to be granted to it in order to access both Databricks Workspaces and assets managed by workspaces. These access rights can be granted via the python_provisiong.py script, which requires an admin Databricks account to grant permissions.

If new assets (workflows, notebooks, clusters) are added in a workspace, then the LHO service principal needs permission to access those assets as well. This can be done automatically by adding the previous script as an Azure Function that runs recurrently on scheduled basis.

Prerequisites

Setup azcli

Install azcli core tool from Azure on your local machine

...

If core tools have been installed correctly, then func --version should work and return the current version.

Login with azcli

• https://learn.microsoft.com/en-us/cli/azure/get-started-with-azure-cli#how-to-sign-into-the-azure-cli

Run az login

How to create the Azure Function

Step 1. In the Azure Portal create a new resource group
This resource group is used to group all assets related to this Azure Function.

...

Step 6. Download the python_provisioning.py and azure_main.py into the new function directory lhm-grant

Step 7. Edit azure_main.py and provide needed information for the grant code

...