API scopes

API scopes restrict which Databricks REST API endpoints a token can access. Each scope grants access to specific API operations.

Access Management

access-management

Perform operations related to users, service principals, groups and their permissions in Accounts and Workspaces.

Operation	API
List Workspace Permission Assignments	Access Management
List Workspace Permissions	Access Management
Delete Workspace Permission Assignment	Access Management
Update Workspace Permission Assignment	Access Management
List Assignable Roles For Resource	Access Management
Get Rule Set	Access Management
Update Rule Set	Access Management

Authentication

authentication

Perform operations related to authentication settings and configurations for Accounts and Workspaces.

Operation	API
List Account Federation Policies	Authentication
Create Account Federation Policy	Authentication
Get Account Federation Policy	Authentication
Update Account Federation Policy	Authentication
Delete Account Federation Policy	Authentication
List Service Principal Federation Policies	Authentication
Create Service Principal Federation Policy	Authentication
Get Service Principal Federation Policy	Authentication
Update Service Principal Federation Policy	Authentication
Delete Service Principal Federation Policy	Authentication
List Service Principal Secrets	Authentication
Create Service Principal Secret	Authentication
Delete Service Principal Secret	Authentication
List Custom O Auth App Integrations	O Auth
Create Custom O Auth App Integration	O Auth
Get Custom O Auth App Integration	O Auth
Update Custom O Auth App Integration	O Auth
Delete Custom O Auth App Integration	O Auth
List Published O Auth App Integrations	O Auth
Create Published O Auth App Integration	O Auth
Get Published O Auth App Integration	O Auth
Update Published O Auth App Integration	O Auth
Delete Published O Auth App Integration	O Auth
List Published O Auth Apps	O Auth

Billing

billing

Perform operations related to Databricks billing and usage.

Operation	API
Download	Billable Usage Download
List Budget Policies	Budget Policy
Create Budget Policy	Budget Policy
Update Budget Policy	Budget Policy
Delete Budget Policy	Budget Policy
Get Budget Policy	Budget Policy
List Budget Configurations	Budgets
Get Budget Configuration	Budgets
Delete Budget Configuration	Budgets
Create Budget Configuration	Budgets
Update Budget Configuration	Budgets
List Log Delivery Configuration	Log Delivery
Update Log Delivery Configuration	Log Delivery
Get Log Delivery Configuration	Log Delivery
Create Log Delivery Configuration	Log Delivery
Create Billing Usage Dashboard	Usage Dashboards
Get Billing Usage Dashboard	Usage Dashboards

Disaster Recovery

disaster-recovery

Manage disaster recovery configurations and execute failover operations.

Operation	API
Update Failover Group	Disaster Recovery
Get Failover Group	Disaster Recovery
Delete Failover Group	Disaster Recovery
Failover Failover Group	Disaster Recovery
Get Stable Url	Disaster Recovery
Delete Stable Url	Disaster Recovery
List Failover Groups	Disaster Recovery
Create Failover Group	Disaster Recovery
List Stable Urls	Disaster Recovery
Create Stable Url	Disaster Recovery

Identity

identity

Perform operations related to identities in Accounts and Workspaces.

Operation	API
List Groups	Iam
Create Group	Iam
Resolve Group	Iam
Update Group	Iam
Delete Group	Iam
Get Group	Iam
Create Direct Group Member	Iam
List Direct Group Members	Iam
Get Direct Group Member	Iam
Delete Direct Group Member	Iam
List Transitive Parent Groups	Iam
Create Service Principal	Iam
List Service Principals	Iam
Resolve Service Principal	Iam
Delete Service Principal	Iam
Get Service Principal	Iam
Update Service Principal	Iam
List Users	Iam
Create User	Iam
Resolve User	Iam
Delete User	Iam
Get User	Iam
Update User	Iam
Get Workspace Access Detail	Iam
List Workspace Assignments	Iam
Create Workspace Assignment	Iam
Get Workspace Assignment	Iam
Update Workspace Assignment	Iam
Delete Workspace Assignment	Iam
Get External Group	Iam
Get External Service Principal	Iam
Get External User	Iam

Networking

networking

Perform operations related to network connectivity configurations, private access, and network policies.

Operation	API
List Account Ip Access Lists	Networking
Create Account Ip Access List	Networking
Update Account Ip Access List	Networking
Delete Account Ip Access List	Networking
Replace Account Ip Access List	Networking
Get Account Ip Access List	Networking
Create Network Connectivity Config Public	Networking
List Network Connectivity Configs Public	Networking
Get Network Connectivity Config Public	Networking
Delete Network Connectivity Config Public	Networking
List Ncc Private Endpoint Rules	Networking
Create Ncc Private Endpoint Rule	Networking
Get Ncc Private Endpoint Rule	Networking
Update Ncc Private Endpoint Rule	Networking
Delete Ncc Private Endpoint Rule	Networking
List Network Policies Rpc	Networking
Create Network Policy Rpc	Networking
Update Network Policy Rpc	Networking
Delete Network Policy Rpc	Networking
Get Network Policy Rpc	Networking
List Network Public	Networking
Create Network Public	Networking
Get Network Public	Networking
Delete Network Public	Networking
Create Private Access Settings Public	Networking
List Private Access Settings Public	Networking
Get Private Access Settings Public	Networking
Delete Private Access Settings Public	Networking
List Vpc Endpoint Public	Networking
Create Vpc Endpoint Public	Networking
Get Vpc Endpoint Public	Networking
Delete Vpc Endpoint Public	Networking
Get Workspace Network Option Rpc	Networking
Update Workspace Network Option Rpc	Networking
Update Private Access Settings Public	Networking

Provisioning

provisioning

Perform operations related to Databricks Workspace deployment, cross-account IAM roles, storage, and encryption configurations.

Operation	API
List Customer Managed Key Public	Key Configurations
Create Customer Managed Key Public	Key Configurations
Delete Customer Managed Key Public	Key Configurations
Get Customer Managed Key Public	Key Configurations
Get Endpoint	Networking
Delete Endpoint	Networking
List Endpoints	Networking
Create Endpoint	Networking
Create Storage Configuration Public	Storage Configurations
List Storage Configuration Public	Storage Configurations
Get Storage Configuration Public	Storage Configurations
Delete Storage Configuration Public	Storage Configurations
List Workspaces Public	Workspaces
Create Workspace Public	Workspaces
Get Workspace Public	Workspaces
Delete Workspace Public	Workspaces
Update Workspace Public	Workspaces

SCIM

scim

Perform operations related to users, service principals, groups and their permissions in Accounts and Workspaces.

Operation	API
List Account Groups	Scim
Create Account Group	Scim
Get Account Group	Scim
Update Account Group	Scim
Delete Account Group	Scim
Patch Account Group	Scim
Create Account Service Principal	Scim
List Account Service Principals	Scim
Get Account Service Principal	Scim
Update Account Service Principal	Scim
Delete Account Service Principal	Scim
Patch Account Service Principal	Scim
List Account Users	Scim
Create Account User	Scim
Get Account User	Scim
Update Account User	Scim
Delete Account User	Scim
Patch Account User	Scim

Settings

settings

Perform operations related to security settings for Accounts and Workspaces.

Operation	API
List Account Settings Metadata	Settings
Get Public Account Setting	Settings
Patch Public Account Setting	Settings
List Account User Preferences Metadata	Settings
Get Public Account User Preference	Settings
Patch Public Account User Preference	Settings

Unity Catalog

unity-catalog

Perform operations related to data governance with Unity Catalog for metastores, catalogs, schemas, tables, external locations, and storage credentials.

Operation	API
List Credentials Public	Uc Credentials
Create Credentials Public	Uc Credentials
Delete Credentials Public	Uc Credentials
Get Credentials Public	Uc Credentials
List Accounts Storage Credentials	Uc Credentials
Create Accounts Storage Credential	Uc Credentials
Delete Accounts Storage Credential	Uc Credentials
Get Accounts Storage Credential	Uc Credentials
Update Accounts Storage Credential	Uc Credentials
List Accounts Metastores	Uc Metastores
Create Accounts Metastore	Uc Metastores
Get Accounts Metastore	Uc Metastores
Update Accounts Metastore	Uc Metastores
Delete Accounts Metastore	Uc Metastores
List Metastore Assignments	Uc Metastores
Get Metastore Assignment	Uc Metastores
Create Accounts Metastore Assignment	Uc Metastores
Update Accounts Metastore Assignment	Uc Metastores
Delete Accounts Metastore Assignment	Uc Metastores