Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The following provides a comprehensive guide to understanding and utilizing the capabilities of the Azure Function for LHO Permissions setup script within your Azure environment.

Info

This page contains:

  • script to grant permissions to LHM Lakehouse Optimizer service principal

  • instructions to setup an automated mechanism to grant same permissions to LHM LHO for newly added assets in a Databricks Workspace

...

The service principal used by LHM LHO requires permissions to be granted to it in order to access both Databricks Workspaces and those assets managed by workspaces. These access rights can be granted via the python_provisiong.py script, which requires an admin Databricks account in order to grant permisionspermissions.

If new assets (workflows, notebooks, clusters) are added in a workspace, then the LHM LHO service principal need to be granted needs permission to access those assets as well. This can be done automatically by adding the previous as script as an Azure Function that runs recurrently on scheduled basis.

Prerequisites

Setup azcli

Install azcli core tool from Azure on your local machine

...

If core tools have been installed correctly, then func --version should work and return the current version.

Login with azcli

Run az login

How to create the Azure Function

Step 1. In the Azure Portal create a new resource group
This resource group is used to group all assets related to this Azure Function.

...