You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Right now databricks_permissions is used to define all permissions for a given securable object, including a special objects "token usage" and "password usage" (doc) that exist as a single instance. Because all permissions needs to be defined inside the same resource, it's getting hard to use it, especially if people are trying to assign permissions inside the modules - in this case all previous assignments will be removed, leading to revoke of the tokens, etc. because we're using PUT API to set permissions
Proposal
This problem could be solved by adding a new resource that will use PATCH API to add/remove individual permissions, although it may lead to inability to detect a configuration drift if changes to permissions are made outside of the terraform.
The text was updated successfully, but these errors were encountered:
alexott
changed the title
[FEATURE] Add a new resource to
[FEATURE] Add a new resource to set individual permissions levels for token/password usage
Jun 12, 2023
Use-cases
Right now
databricks_permissions
is used to define all permissions for a given securable object, including a special objects "token usage" and "password usage" (doc) that exist as a single instance. Because all permissions needs to be defined inside the same resource, it's getting hard to use it, especially if people are trying to assign permissions inside the modules - in this case all previous assignments will be removed, leading to revoke of the tokens, etc. because we're usingPUT
API to set permissionsProposal
This problem could be solved by adding a new resource that will use
PATCH
API to add/remove individual permissions, although it may lead to inability to detect a configuration drift if changes to permissions are made outside of the terraform.The text was updated successfully, but these errors were encountered: