Skip to content

Commit 74ee227

Browse files
authored
[Doc] Update the list of UC permissions in UC guide for Azure (#4852)
## Changes <!-- Summary of your changes that are easy to understand --> The Azure Databricks UC documentation lists four required roles, but we had only two. See https://learn.microsoft.com/en-us/azure/databricks/connect/unity-catalog/cloud-storage/manage-external-locations#for-azure-data-lake-storage-containers ## Tests <!-- How is this tested? Please see the checklist below and also describe any other relevant tests --> - [x] relevant change in `docs/` folder - [x] has entry in `NEXT_CHANGELOG.md` file
1 parent e768c8a commit 74ee227

File tree

2 files changed

+15
-2
lines changed

2 files changed

+15
-2
lines changed

NEXT_CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,7 @@
2727
* Update Databricks SQL objects documentation ([#4840](https://github.com/databricks/terraform-provider-databricks/pull/4840))
2828
* Improve documentation for `databricks_git_credential` resource ([#4837](https://github.com/databricks/terraform-provider-databricks/pull/4837))
2929
* Rename DLT references to Lakeflow Declarative pipelines ([#4842](https://github.com/databricks/terraform-provider-databricks/pull/4842))
30+
* Update the list of UC permissions in UC guide for Azure ([#4852](https://github.com/databricks/terraform-provider-databricks/pull/4852)).
3031
* Clarify and add more examples to `databricks_mws_network_connectivity_config` and `databricks_mws_ncc_private_endpoint_rule` documentation ([#4847](https://github.com/databricks/terraform-provider-databricks/pull/4847))
3132

3233
### Exporter

docs/guides/unity-catalog-azure.md

Lines changed: 14 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -146,17 +146,29 @@ resource "azurerm_storage_container" "ext_storage" {
146146
container_access_type = "private"
147147
}
148148
149-
resource "azurerm_role_assignment" "ext_storage" {
149+
resource "azurerm_role_assignment" "ext_storage_1" {
150+
scope = azurerm_storage_account.ext_storage.id
151+
role_definition_name = "Storage Account Contributor"
152+
principal_id = azurerm_databricks_access_connector.ext_access_connector.identity[0].principal_id
153+
}
154+
155+
resource "azurerm_role_assignment" "ext_storage_2" {
150156
scope = azurerm_storage_account.ext_storage.id
151157
role_definition_name = "Storage Blob Data Contributor"
152158
principal_id = azurerm_databricks_access_connector.ext_access_connector.identity[0].principal_id
153159
}
154160
155-
resource "azurerm_role_assignment" "ext_storage" {
161+
resource "azurerm_role_assignment" "ext_storage_3" {
156162
scope = azurerm_storage_account.ext_storage.id
157163
role_definition_name = "Storage Queue Data Contributor"
158164
principal_id = azurerm_databricks_access_connector.ext_access_connector.identity[0].principal_id
159165
}
166+
167+
resource "azurerm_role_assignment" "ext_storage_4" {
168+
scope = data.azurerm_resource_group.this.id
169+
role_definition_name = "EventGrid EventSubscription Contributor"
170+
principal_id = azurerm_databricks_access_connector.ext_access_connector.identity[0].principal_id
171+
}
160172
```
161173

162174
Then create the [databricks_storage_credential](../resources/storage_credential.md) and [databricks_external_location](../resources/external_location.md) in Unity Catalog.

0 commit comments

Comments
 (0)