API scopes

API scopes restrict which Databricks REST API endpoints a token can access. Each scope grants access to specific API operations.

Access Management

access-management

Perform operations related to users, service principals, groups and their permissions in Accounts and Workspaces.

Operation	API
List Workspace Permission Assignments	Access Management
List Workspace Permissions	Access Management
Delete Workspace Permission Assignment	Access Management
Update Workspace Permission Assignment	Access Management
Update Workspace Permission Assignment	Access Management
Delete Workspace Permission Assignment	Access Management
List Assignable Roles For Resource Proxy	Access Management
Get Rule Set Proxy	Access Management
Update Rule Set Proxy	Access Management
List Assignable Roles For Resource	Access Management
Get Rule Set	Access Management
Update Rule Set	Access Management

Authentication

authentication

Perform operations related to authentication settings and configurations for Accounts and Workspaces.

Operation	API
List Service Principal Secrets Proxy	Authentication
Create Service Principal Secret Proxy	Authentication
Delete Service Principal Secret Proxy	Authentication
List Account Federation Policies	Authentication
Create Account Federation Policy	Authentication
Update Account Federation Policy	Authentication
Delete Account Federation Policy	Authentication
Get Account Federation Policy	Authentication
List Service Principal Federation Policies	Authentication
Create Service Principal Federation Policy	Authentication
Update Service Principal Federation Policy	Authentication
Get Service Principal Federation Policy	Authentication
Delete Service Principal Federation Policy	Authentication
List Service Principal Secrets	Authentication
Create Service Principal Secret	Authentication
Delete Service Principal Secret	Authentication
List Custom O Auth App Integrations	O Auth
Create Custom O Auth App Integration	O Auth
Update Custom O Auth App Integration	O Auth
Delete Custom O Auth App Integration	O Auth
Get Custom O Auth App Integration	O Auth
Create Published O Auth App Integration	O Auth
List Published O Auth App Integrations	O Auth
Delete Published O Auth App Integration	O Auth
Update Published O Auth App Integration	O Auth
Get Published O Auth App Integration	O Auth
List Published O Auth Apps	O Auth

Billing

billing

Perform operations related to Databricks billing and usage.

Operation	API
Download	Billable Usage Download
List Budget Policies	Budget Policy
Create Budget Policy	Budget Policy
Update Budget Policy	Budget Policy
Delete Budget Policy	Budget Policy
Get Budget Policy	Budget Policy
List Budget Configurations	Budgets
Get Budget Configuration	Budgets
Delete Budget Configuration	Budgets
Create Budget Configuration	Budgets
Update Budget Configuration	Budgets
List Log Delivery Configuration	Log Delivery
Update Log Delivery Configuration	Log Delivery
Get Log Delivery Configuration	Log Delivery
Create Log Delivery Configuration	Log Delivery
Create Billing Usage Dashboard	Usage Dashboards
Get Billing Usage Dashboard	Usage Dashboards

Identity

identity

Perform operations related to identities in Accounts and Workspaces.

Operation	API
Resolve Group	Iam
Resolve Service Principal	Iam
Resolve User	Iam
Get Workspace Access Detail	Iam

Networking

networking

Perform operations related to network connectivity configurations, private access, and network policies.

Operation	API
List Account Ip Access Lists	Networking
Create Account Ip Access List	Networking
Delete Account Ip Access List	Networking
Get Account Ip Access List	Networking
Update Account Ip Access List	Networking
Replace Account Ip Access List	Networking
Create Network Connectivity Config Public	Networking
List Network Connectivity Configs Public	Networking
Delete Network Connectivity Config Public	Networking
Get Network Connectivity Config Public	Networking
Create Ncc Private Endpoint Rule	Networking
List Ncc Private Endpoint Rules	Networking
Get Ncc Private Endpoint Rule	Networking
Delete Ncc Private Endpoint Rule	Networking
Update Ncc Private Endpoint Rule	Networking
List Network Policies Rpc	Networking
Create Network Policy Rpc	Networking
Get Network Policy Rpc	Networking
Update Network Policy Rpc	Networking
Delete Network Policy Rpc	Networking
Create Network Public	Networking
List Network Public	Networking
Get Network Public	Networking
Delete Network Public	Networking
List Private Access Settings Public	Networking
Create Private Access Settings Public	Networking
Get Private Access Settings Public	Networking
Delete Private Access Settings Public	Networking
Create Vpc Endpoint Public	Networking
List Vpc Endpoint Public	Networking
Delete Vpc Endpoint Public	Networking
Get Vpc Endpoint Public	Networking
Update Workspace Network Option Rpc	Networking
Get Workspace Network Option Rpc	Networking
Update Private Access Settings Public	Networking

Provisioning

provisioning

Perform operations related to Databricks Workspace deployment, cross-account IAM roles, storage, and encryption configurations.

Operation	API
List Customer Managed Key Public	Key Configurations
Create Customer Managed Key Public	Key Configurations
Delete Customer Managed Key Public	Key Configurations
Get Customer Managed Key Public	Key Configurations
Create Storage Configuration Public	Storage Configurations
List Storage Configuration Public	Storage Configurations
Get Storage Configuration Public	Storage Configurations
Delete Storage Configuration Public	Storage Configurations
Create Workspace Public	Workspaces
List Workspaces Public	Workspaces
Get Workspace Public	Workspaces
Delete Workspace Public	Workspaces
Update Workspace Public	Workspaces

SCIM

scim

Perform operations related to users, service principals, groups and their permissions in Accounts and Workspaces.

Operation	API
Create Account Group	Scim
List Account Groups	Scim
Delete Account Group	Scim
Get Account Group	Scim
Patch Account Group	Scim
Update Account Group	Scim
Create Account Service Principal	Scim
List Account Service Principals	Scim
Get Account Service Principal	Scim
Delete Account Service Principal	Scim
Patch Account Service Principal	Scim
Update Account Service Principal	Scim
Create Account User	Scim
List Account Users	Scim
Delete Account User	Scim
Get Account User	Scim
Patch Account User	Scim
Update Account User	Scim

Settings

settings

Perform operations related to security settings for Accounts and Workspaces.

Operation	API
List Account Settings Metadata	Settings
Get Public Account Setting	Settings
Patch Public Account Setting	Settings
List Account User Preferences Metadata	Settings
Get Public Account User Preference	Settings
Patch Public Account User Preference	Settings

Unity Catalog

unity-catalog

Perform operations related to data governance with Unity Catalog for metastores, catalogs, schemas, tables, external locations, and storage credentials.

Operation	API
Create Credentials Public	Uc Credentials
List Credentials Public	Uc Credentials
Delete Credentials Public	Uc Credentials
Get Credentials Public	Uc Credentials
List Accounts Storage Credentials	Uc Credentials
Create Accounts Storage Credential	Uc Credentials
Delete Accounts Storage Credential	Uc Credentials
Update Accounts Storage Credential	Uc Credentials
Get Accounts Storage Credential	Uc Credentials
Create Accounts Metastore	Uc Metastores
List Accounts Metastores	Uc Metastores
Delete Accounts Metastore	Uc Metastores
Get Accounts Metastore	Uc Metastores
Update Accounts Metastore	Uc Metastores
List Metastore Assignments	Uc Metastores
Get Metastore Assignment	Uc Metastores
Create Accounts Metastore Assignment	Uc Metastores
Delete Accounts Metastore Assignment	Uc Metastores
Update Accounts Metastore Assignment	Uc Metastores