Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The following provides a comprehensive guide to understanding and utilizing the capabilities of the Azure Function for LHO Permissions setup script within your Azure environment.

Info

This page contains:

  • script to grant permissions to Lakehouse Optimizer service principal

  • instructions to setup an automated mechanism to grant same permissions to LHO for newly added assets in a Databricks Workspace

...

The service principal used by LHO requires permissions to be granted to it in order to access both Databricks Workspaces and those assets managed by workspaces. These access rights can be granted via the python_provisiong.py script, which requires an admin Databricks account in order to grant permisionspermissions.

If new assets (workflows, notebooks, clusters) are added in a workspace, then the LHO service principal need to be granted needs permission to access those assets as well. This can be done automatically by adding the previous as script as an Azure Function that runs recurrently on scheduled basis.

...