You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -18,7 +16,7 @@ Segment recommends setting up a new Service Principal user and only giving this
18
16
19
17
If you already have a Service Principal user you'd like to use, grant it "Can use" permissions for your data warehouse and proceed to [Step 2](#step-2-create-a-catalog-for-segment-to-store-checkpoint-tables).
20
18
21
-
### a) Create a new Service Principal user
19
+
### 1a) Create a new Service Principal user
22
20
1. Log in to the Databricks UI as an Admin.
23
21
2. Click **User Management**.
24
22
3. Select the **Service principals** tab.
@@ -30,14 +28,15 @@ If you already have a Service Principal user you'd like to use, grant it "Can us
30
28
9. Select the “Permissions” tab and click **Add Permissions**.
31
29
10. Add the newly created Service Principal user and click **Save**.
32
30
33
-
### b) Add your Service Principal user to Warehouse User Lists
31
+
### 1b) Add your Service Principal user to Warehouse User Lists
34
32
1. Log in to the Databricks UI as an Admin.
35
33
2. Navigate to SQL Warehouses.
36
34
3. Select your warehouse and click **Permissions**.
37
35
4. Add the Service Principal user and grant them “Can use” access.
38
36
5. Click **Add**.
39
37
40
38
## Step 2: Create a catalog for Segment to store checkpoint tables
39
+
41
40
**Segment requires write access to this catalog for internal bookkeeping and to store checkpoint tables for the queries that are executed. Therefore, Segment recommends creating a new catalog for this purpose.** This is also the catalog you'll be required to specify when connecting Databricks with the Segment app.
42
41
43
42
> info ""
@@ -69,6 +68,7 @@ GRANT USAGE, SELECT, USE SCHEMA ON CATALOG `${catalog}` TO `${client_id}`;
69
68
```
70
69
71
70
## (Optional) Step 5: Restrict read-only access
71
+
72
72
### Restrict read-only access to schemas
73
73
74
74
Restrict access to specific schemas by running the following SQL:
@@ -97,7 +97,7 @@ GRANT SELECT ON TABLE `${table_2}` TO `${client_id}`;
97
97
98
98
## Step 6: Validate the permissions of your Service Principal user
99
99
100
-
Sign in to the [Databricks CLI with your Client ID secret](https://docs.databricks.com/en/dev-tools/cli/authentication.html#oauth-machine-to-machine-m2m-authentication) and run the following SQL to verify the Service Principal user has the correct permissions for a given table.
100
+
Sign in to the [Databricks CLI with your Client ID secret](https://docs.databricks.com/en/dev-tools/cli/authentication.html#oauth-machine-to-machine-m2m-authentication){:target="_blank"} and run the following SQL to verify the Service Principal user has the correct permissions for a given table.
101
101
102
102
> success ""
103
103
> If this command succeeds, you can view the table.
@@ -109,6 +109,7 @@ SELECT * FROM ${schema}.${table} LIMIT 10;
109
109
```
110
110
111
111
## Step 7: Connect your warehouse to Segment
112
+
112
113
To connect your warehouse to the Data Graph:
113
114
114
115
1. Navigate to **Unify > Data Graph**. This should be a Unify space with Profiles Sync already set up.
0 commit comments