Account Group

View as Markdown

The details of a Group resource.

Get a group in the accountGET /api/2.0/identity/{name=accounts/*/groups/*}List groups in the accountGET /api/2.0/identity/{parent=accounts/*}/groupsCreate a group in the accountPOST /api/2.0/identity/{parent=accounts/*}/groupsUpdate a group in the accountPATCH /api/2.0/identity/{name=accounts/*/groups/*}Delete a group in the accountDELETE /api/2.0/identity/{name=accounts/*/groups/*}Resolve an external group in the Databricks accountPOST /api/2.0/identity/accounts/{account_id}/groups/resolve-by-external-id

Group object

The details of a Group resource.

namestringBetaIDImmutable

The resource name of the group. The format depends on the API that returned it:

• Account-scoped: accounts/{account_id}/groups/{group_id}
• Workspace-scoped: groups/{group_id}

parentstringBetaOutput onlyImmutable

The resource name of the account that contains the group, accounts/{account_id}. Both the account-scoped and workspace-scoped APIs return it.

account_idstringBetaOutput onlyImmutable

The parent account ID for group in Databricks.

group_idstringBetaOutput onlyImmutable

Internal group ID of the group in Databricks.

external_idstringBeta

ExternalId of the group in the customer's IdP.

group_namestringBeta

Display name of the group.

View as Markdown

The Group object

{
  "name": "string",
  "parent": "string",
  "account_id": "string",
  "group_id": "string",
  "external_id": "string",
  "group_name": "string"
}

Get a group in the account Beta

GET /api/2.0/identity/{name=accounts/*/groups/*}

Fetches a group from the Databricks account by its internal ID.

API scopes: identity

Parameters

namestringRequiredpath

The resource name of the group. Format: accounts/{account_id}/groups/{group_id}

Response

Returns the Group object.

View as Markdown

Response

{
  "name": "string",
  "parent": "string",
  "account_id": "string",
  "group_id": "string",
  "external_id": "string",
  "group_name": "string"
}

List groups in the account Beta

GET /api/2.0/identity/{parent=accounts/*}/groups

Lists the groups in the Databricks account, returning one page per call. Supports filtering by group name or external ID.

API scopes: identity

Parameters

parentstringRequiredpath

The parent resource name of the account whose groups to list. Format: accounts/{account_id}

page_sizeint32query

The maximum number of groups to return. The service may return fewer than this value. If not provided, defaults to 1000, which is also the maximum allowed. Requests for more than the maximum are clamped to 1000.

page_tokenstringquery

A page token, received from a previous ListGroups call. Provide this to retrieve the subsequent page.

filterstringquery

Optional. Allows filtering groups by group name or external id.

Response

Returns a list of Group objects.

View as Markdown

Response

{
  "groups": [
    {
      "name": "string",
      "parent": "string",
      "account_id": "string",
      "group_id": "string",
      "external_id": "string",
      "group_name": "string"
    }
  ],
  "next_page_token": "string"
}

Create a group in the account Beta

POST /api/2.0/identity/{parent=accounts/*}/groups

Creates a local group in the Databricks account and returns the created group. A local group is one that is not synced from the customer's identity provider, and can be created whether or not Account Identity Management (AIM) is enabled.

When AIM is enabled, supplying an external ID returns an error. To provision the identity from your identity provider, resolve it by its external ID with ResolveGroup; to read an existing external identity, use the ExternalGroup resource.

API scopes: identity

Parameters

parentstringRequiredpath

The parent resource name of the account in which to create the group. Format: accounts/{account_id}

Request body

Required. Group to be created in Databricks

namestringIDImmutable

The resource name of the group. The format depends on the API that returned it:

• Account-scoped: accounts/{account_id}/groups/{group_id}
• Workspace-scoped: groups/{group_id}

external_idstring

ExternalId of the group in the customer's IdP.

group_namestring

Display name of the group.

Response

Returns the Group object.

View as Markdown

Request

{
  "name": "string",
  "external_id": "string",
  "group_name": "string"
}

Response

{
  "name": "string",
  "parent": "string",
  "account_id": "string",
  "group_id": "string",
  "external_id": "string",
  "group_name": "string"
}

Update a group in the account Beta

PATCH /api/2.0/identity/{name=accounts/*/groups/*}

Updates an existing group in the Databricks account. Only the fields named in the update mask are modified. Returns the updated Group resource.

When AIM is enabled and the group is an external identity (its external_id is set), only external_id can be updated; its other fields are sourced from your identity provider. With AIM and group visibility filters, a new nonempty external_id must identify a visible group. Clearing external_id is allowed.

Authorization: the caller must be an account admin or a manager of the group (holds the roles/group.manager role on it).

API scopes: identity

Parameters

namestringRequiredIDImmutablepath

The resource name of the group. The format depends on the API that returned it:

• Account-scoped: accounts/{account_id}/groups/{group_id}
• Workspace-scoped: groups/{group_id}

update_maskstringRequiredquery

Required. The list of fields to update.

Request body

Required. Group to be updated in Databricks

external_idstring

ExternalId of the group in the customer's IdP.

group_namestring

Display name of the group.

Response

Returns the Group object.

View as Markdown

Request

{
  "external_id": "string",
  "group_name": "string"
}

Response

{
  "name": "string",
  "parent": "string",
  "account_id": "string",
  "group_id": "string",
  "external_id": "string",
  "group_name": "string"
}

Delete a group in the account Beta

DELETE /api/2.0/identity/{name=accounts/*/groups/*}

Deletes a group from the Databricks account by its internal ID.

Authorization: the caller must be an account admin or a manager of the group (holds the roles/group.manager role on it).

API scopes: identity

Parameters

namestringRequiredpath

The resource name of the group. Format: accounts/{account_id}/groups/{group_id}

View as Markdown

Response

{}

Resolve an external group in the Databricks account Beta

POST /api/2.0/identity/accounts/{account_id}/groups/resolve-by-external-id

Resolves a group with the given external ID from the customer's IdP. If the group does not exist, it will be created in the account. If the customer is not onboarded onto Automatic Identity Management (AIM), this will return an error.

API scopes: identity

Parameters

account_idstringRequiredpath

Required. The account ID for which the group is being resolved.

Request body

external_idstringRequired

Required. The external ID of the group in the customer's IdP.

Response

groupobject

The group that was resolved.

Show child attributesHide child attributes

namestringIDImmutable

The resource name of the group. The format depends on the API that returned it:

• Account-scoped: accounts/{account_id}/groups/{group_id}
• Workspace-scoped: groups/{group_id}

parentstringOutput onlyImmutable

The resource name of the account that contains the group, accounts/{account_id}. Both the account-scoped and workspace-scoped APIs return it.

account_idstringOutput onlyImmutable

The parent account ID for group in Databricks.

group_idstringOutput onlyImmutable

Internal group ID of the group in Databricks.

external_idstring

ExternalId of the group in the customer's IdP.

group_namestring

Display name of the group.

View as Markdown

Request

{
  "external_id": "string"
}

Response

{
  "group": {
    "name": "string",
    "parent": "string",
    "account_id": "string",
    "group_id": "string",
    "external_id": "string",
    "group_name": "string"
  }
}