How to create a custom Role in Azure for LHO to use
- Ciprian LUCACI
Lakehouse Optimizer requires only read permission to list Databricks Workspaces. Therefore, in order to limit the rights only to this permission, create a custom role with only this permission.
For example, BplmDatabricksReader is a custom role configured to provide only “List workspaces” rights for Databricks.
The prebuilt Reader role provide access to too many resources which are not required by LHO to function properly.
Prerequisite
the signed in user creating the custom role needs to have
User Access Administratorrole assigned on the selected Subscription
Navigate to Azure Portal – https://portal.azure.com/
(1) Open Subscriptions
(2) Select Subscription on which you want to create the custom role with read access to list workspaces.
(3) Open Access Control (IAM) panel
(4) Add custom Role
Lakehouse Optimizer requires only read permission to list Databricks Workspaces. Therefore, in order to limit the unnecessary rights, create a custom role with only this permission.
Click “Review + create”
Review custom role
Once this custom role is created you can use it for LHO configuration.