Skip to main content

Role

View as Markdown

Role represents a Postgres role within a Branch.

Role object​

Role represents a Postgres role within a Branch.

namestring

Output only. The full resource path of the role. Format: projects/{project_id}/branches/{branch_id}/roles/{role_id}

parentstring

The Branch where this Role exists. Format: projects/{project_id}/branches/{branch_id}

create_timestring
update_timestring
specobject

The spec contains the role configuration, including identity type, authentication method, and role attributes.

Show child attributesHide child attributes
membership_rolesarray of string

An enum value for a standard role that this role is a member of.

Values: MEMBERSHIP_ROLE_UNSPECIFIED, DATABRICKS_SUPERUSER

identity_typestring

The type of role. When specifying a managed-identity, the chosen role_id must be a valid:

  • application ID for SERVICE_PRINCIPAL
  • user email for USER
  • group name for GROUP

Values: IDENTITY_TYPE_UNSPECIFIED, USER, SERVICE_PRINCIPAL, GROUP

attributesobject

The desired API-exposed Postgres role attribute to associate with the role. Optional.

Show child attributesHide child attributes
createdbboolean
createroleboolean
bypassrlsboolean
auth_methodstring

Controls how the Postgres role authenticates when a client opens a database connection. Supported values:

  • LAKEBASE_OAUTH_V1: the role authenticates by presenting a Databricks OAuth access token derived from the backing managed identity (the <Databricks> user, service principal, or group named by the role's postgres_role). No static password exists for roles using this method.
  • PG_PASSWORD_SCRAM_SHA_256: the role authenticates with a Postgres password verified server-side using the SCRAM-SHA-256 mechanism. Lakebase generates a password for the role.
  • NO_LOGIN: the role cannot open a Postgres session at all. Useful for roles that exist only to own objects or to aggregate privileges that are then granted to other, loginable roles.

If auth_method is left unspecified, a meaningful authentication method is derived from the identity_type:

  • For the managed identities, OAUTH is used.
  • For the regular postgres roles, authentication based on postgres passwords is used.

NOTE: for the <Databricks> identity type GROUP, LAKEBASE_OAUTH_V1 is the default auth method (group can login as well).

Values: AUTH_METHOD_UNSPECIFIED, NO_LOGIN, PG_PASSWORD_SCRAM_SHA_256, LAKEBASE_OAUTH_V1

postgres_rolestring

The name of the Postgres role.

This expects a valid Postgres identifier as specified in the link below. https://www.postgresql.org/docs/current/sql-syntax-lexical.html#SQL-SYNTAX-IDENTIFIERS

Required when creating the Role.

If you wish to create a Postgres Role backed by a managed <Databricks> identity, then postgres_role must be one of the following:

1. user email for IdentityType.USER
2. app ID for IdentityType.SERVICE_PRINCIPAL
2. group name for IdentityType.GROUP
statusobject

Current status of the role, including its identity type, authentication method, and role attributes.

Show child attributesHide child attributes
membership_rolesarray of string

An enum value for a standard role that this role is a member of.

Values: MEMBERSHIP_ROLE_UNSPECIFIED, DATABRICKS_SUPERUSER

identity_typestring

The type of the role.

Values: IDENTITY_TYPE_UNSPECIFIED, USER, SERVICE_PRINCIPAL, GROUP

attributesobject

The PG role attributes associated with the role.

Show child attributesHide child attributes
createdbboolean
createroleboolean
bypassrlsboolean
auth_methodstring

Values: AUTH_METHOD_UNSPECIFIED, NO_LOGIN, PG_PASSWORD_SCRAM_SHA_256, LAKEBASE_OAUTH_V1

postgres_rolestring

The name of the Postgres role.

role_idstring

Part of the resource name.

role_idstring

The part of the name, chosen by the user when the resource was created.

Get GA​

GET /api/2.0/postgres/{name=projects/*/branches/*/roles/*}

Retrieves information about the specified Postgres role, including its authentication method and permissions.

API scopes: postgres

Parameters​

namestringpath

The full resource path of the role to retrieve. Format: projects/{project_id}/branches/{branch_id}/roles/{role_id}

Response​

Returns the Role object.

List GA​

GET /api/2.0/postgres/{parent=projects/*/branches/*}/roles

Returns a paginated list of Postgres roles in the branch.

API scopes: postgres

Parameters​

parentstringpath

The Branch that owns this collection of roles. Format: projects/{project_id}/branches/{branch_id}

page_tokenstringquery

Page token from a previous response. If not provided, returns the first page.

page_sizeint32query

Upper bound for items returned. Cannot be negative.

Response​

Returns a list of Role objects.

Create GA​

POST /api/2.0/postgres/{parent=projects/*/branches/*}/roles

Creates a new Postgres role in the branch.

API scopes: postgres

Parameters​

parentstringpath

The Branch where this Role is created. Format: projects/{project_id}/branches/{branch_id}

role_idstringquery

The ID to use for the Role, which will become the final component of the role's resource name. This ID becomes the role in Postgres.

This value should be 4-63 characters, and valid characters are lowercase letters, numbers, and hyphens, as defined by RFC 1123.

If role_id is not specified in the request, it is generated automatically.

replace_existingbooleanquery

If true, update the role if it already exists instead of returning an error.

When the role already exists, the provided role spec fully replaces the existing one: membership_roles is overwritten, not merged. Leaving membership_roles empty clears all of the role's existing memberships, including DATABRICKS_SUPERUSER. Always send the complete desired list of memberships when using this field.

Request body​

roleobject

The desired specification of a Role.

Show child attributesHide child attributes
namestring

Output only. The full resource path of the role. Format: projects/{project_id}/branches/{branch_id}/roles/{role_id}

parentstring

The Branch where this Role exists. Format: projects/{project_id}/branches/{branch_id}

create_timestring
update_timestring
specobject

The spec contains the role configuration, including identity type, authentication method, and role attributes.

Show child attributesHide child attributes
membership_rolesarray of string

An enum value for a standard role that this role is a member of.

Values: MEMBERSHIP_ROLE_UNSPECIFIED, DATABRICKS_SUPERUSER

identity_typestring

The type of role. When specifying a managed-identity, the chosen role_id must be a valid:

  • application ID for SERVICE_PRINCIPAL
  • user email for USER
  • group name for GROUP

Values: IDENTITY_TYPE_UNSPECIFIED, USER, SERVICE_PRINCIPAL, GROUP

attributesobject

The desired API-exposed Postgres role attribute to associate with the role. Optional.

Show child attributesHide child attributes
createdbboolean
createroleboolean
bypassrlsboolean
auth_methodstring

Controls how the Postgres role authenticates when a client opens a database connection. Supported values:

  • LAKEBASE_OAUTH_V1: the role authenticates by presenting a Databricks OAuth access token derived from the backing managed identity (the <Databricks> user, service principal, or group named by the role's postgres_role). No static password exists for roles using this method.
  • PG_PASSWORD_SCRAM_SHA_256: the role authenticates with a Postgres password verified server-side using the SCRAM-SHA-256 mechanism. Lakebase generates a password for the role.
  • NO_LOGIN: the role cannot open a Postgres session at all. Useful for roles that exist only to own objects or to aggregate privileges that are then granted to other, loginable roles.

If auth_method is left unspecified, a meaningful authentication method is derived from the identity_type:

  • For the managed identities, OAUTH is used.
  • For the regular postgres roles, authentication based on postgres passwords is used.

NOTE: for the <Databricks> identity type GROUP, LAKEBASE_OAUTH_V1 is the default auth method (group can login as well).

Values: AUTH_METHOD_UNSPECIFIED, NO_LOGIN, PG_PASSWORD_SCRAM_SHA_256, LAKEBASE_OAUTH_V1

postgres_rolestring

The name of the Postgres role.

This expects a valid Postgres identifier as specified in the link below. https://www.postgresql.org/docs/current/sql-syntax-lexical.html#SQL-SYNTAX-IDENTIFIERS

Required when creating the Role.

If you wish to create a Postgres Role backed by a managed <Databricks> identity, then postgres_role must be one of the following:

1. user email for IdentityType.USER
2. app ID for IdentityType.SERVICE_PRINCIPAL
2. group name for IdentityType.GROUP
statusobject

Current status of the role, including its identity type, authentication method, and role attributes.

Show child attributesHide child attributes
membership_rolesarray of string

An enum value for a standard role that this role is a member of.

Values: MEMBERSHIP_ROLE_UNSPECIFIED, DATABRICKS_SUPERUSER

identity_typestring

The type of the role.

Values: IDENTITY_TYPE_UNSPECIFIED, USER, SERVICE_PRINCIPAL, GROUP

attributesobject

The PG role attributes associated with the role.

Show child attributesHide child attributes
createdbboolean
createroleboolean
bypassrlsboolean
auth_methodstring

Values: AUTH_METHOD_UNSPECIFIED, NO_LOGIN, PG_PASSWORD_SCRAM_SHA_256, LAKEBASE_OAUTH_V1

postgres_rolestring

The name of the Postgres role.

role_idstring

Part of the resource name.

role_idstring

The part of the name, chosen by the user when the resource was created.

Response​

namestring

The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the name should be a resource name ending with operations/{unique_id}.

metadataobject

Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata.

doneboolean

If the value is false, it means the operation is still in progress. If true, the operation is completed, and either error or response is available.

errorobjectRequired

The error result of the operation in case of failure or cancellation.

Show child attributesHide child attributes
error_codestring

Values: UNKNOWN, INTERNAL_ERROR, TEMPORARILY_UNAVAILABLE, IO_ERROR, BAD_REQUEST, SERVICE_UNDER_MAINTENANCE, WORKSPACE_TEMPORARILY_UNAVAILABLE, DEADLINE_EXCEEDED, CANCELLED, RESOURCE_EXHAUSTED, ABORTED, NOT_FOUND, ALREADY_EXISTS, UNAUTHENTICATED, UNAVAILABLE, INVALID_PARAMETER_VALUE, ENDPOINT_NOT_FOUND, MALFORMED_REQUEST, INVALID_STATE, PERMISSION_DENIED, FEATURE_DISABLED, CUSTOMER_UNAUTHORIZED, REQUEST_LIMIT_EXCEEDED, RESOURCE_CONFLICT, UNPARSEABLE_HTTP_ERROR, NOT_IMPLEMENTED, DATA_LOSS, INVALID_STATE_TRANSITION, COULD_NOT_ACQUIRE_LOCK, RESOURCE_ALREADY_EXISTS, RESOURCE_DOES_NOT_EXIST, QUOTA_EXCEEDED, MAX_BLOCK_SIZE_EXCEEDED, MAX_READ_SIZE_EXCEEDED, PARTIAL_DELETE, MAX_LIST_SIZE_EXCEEDED, DRY_RUN_FAILED, RESOURCE_LIMIT_EXCEEDED, DIRECTORY_NOT_EMPTY, DIRECTORY_PROTECTED, MAX_NOTEBOOK_SIZE_EXCEEDED, MAX_CHILD_NODE_SIZE_EXCEEDED, SEARCH_QUERY_TOO_LONG, SEARCH_QUERY_TOO_SHORT, MANAGED_RESOURCE_GROUP_DOES_NOT_EXIST, PERMISSION_NOT_PROPAGATED, DEPLOYMENT_TIMEOUT, GIT_CONFLICT, GIT_UNKNOWN_REF, GIT_SENSITIVE_TOKEN_DETECTED, GIT_URL_NOT_ON_ALLOW_LIST, GIT_REMOTE_ERROR, PROJECTS_OPERATION_TIMEOUT, IPYNB_FILE_IN_REPO, INSECURE_PARTNER_RESPONSE, MALFORMED_PARTNER_RESPONSE, METASTORE_DOES_NOT_EXIST, DAC_DOES_NOT_EXIST, CATALOG_DOES_NOT_EXIST, SCHEMA_DOES_NOT_EXIST, TABLE_DOES_NOT_EXIST, SHARE_DOES_NOT_EXIST, RECIPIENT_DOES_NOT_EXIST, STORAGE_CREDENTIAL_DOES_NOT_EXIST, EXTERNAL_LOCATION_DOES_NOT_EXIST, PRINCIPAL_DOES_NOT_EXIST, PROVIDER_DOES_NOT_EXIST, METASTORE_ALREADY_EXISTS, DAC_ALREADY_EXISTS, CATALOG_ALREADY_EXISTS, SCHEMA_ALREADY_EXISTS, TABLE_ALREADY_EXISTS, SHARE_ALREADY_EXISTS, RECIPIENT_ALREADY_EXISTS, STORAGE_CREDENTIAL_ALREADY_EXISTS, EXTERNAL_LOCATION_ALREADY_EXISTS, PROVIDER_ALREADY_EXISTS, CATALOG_NOT_EMPTY, SCHEMA_NOT_EMPTY, METASTORE_NOT_EMPTY, PROVIDER_SHARE_NOT_ACCESSIBLE

messagestring
stack_tracestring
detailsarray of object
responseobjectRequired

The normal, successful response of the operation.

Update GA​

PATCH /api/2.0/postgres/{role.name=projects/*/branches/*/roles/*}

Update a role for a branch.

API scopes: postgres

Parameters​

roleobjectpath

The Postgres Role to update.

The role's name field is used to identify the role to update. Format: projects/{project_id}/branches/{branch_id}/roles/{role_id}

Show child attributesHide child attributes
namestring

Output only. The full resource path of the role. Format: projects/{project_id}/branches/{branch_id}/roles/{role_id}

parentstring

The Branch where this Role exists. Format: projects/{project_id}/branches/{branch_id}

create_timestring
update_timestring
specobject

The spec contains the role configuration, including identity type, authentication method, and role attributes.

Show child attributesHide child attributes
membership_rolesarray of string

An enum value for a standard role that this role is a member of.

Values: MEMBERSHIP_ROLE_UNSPECIFIED, DATABRICKS_SUPERUSER

identity_typestring

The type of role. When specifying a managed-identity, the chosen role_id must be a valid:

  • application ID for SERVICE_PRINCIPAL
  • user email for USER
  • group name for GROUP

Values: IDENTITY_TYPE_UNSPECIFIED, USER, SERVICE_PRINCIPAL, GROUP

attributesobject

The desired API-exposed Postgres role attribute to associate with the role. Optional.

Show child attributesHide child attributes
createdbboolean
createroleboolean
bypassrlsboolean
auth_methodstring

Controls how the Postgres role authenticates when a client opens a database connection. Supported values:

  • LAKEBASE_OAUTH_V1: the role authenticates by presenting a Databricks OAuth access token derived from the backing managed identity (the <Databricks> user, service principal, or group named by the role's postgres_role). No static password exists for roles using this method.
  • PG_PASSWORD_SCRAM_SHA_256: the role authenticates with a Postgres password verified server-side using the SCRAM-SHA-256 mechanism. Lakebase generates a password for the role.
  • NO_LOGIN: the role cannot open a Postgres session at all. Useful for roles that exist only to own objects or to aggregate privileges that are then granted to other, loginable roles.

If auth_method is left unspecified, a meaningful authentication method is derived from the identity_type:

  • For the managed identities, OAUTH is used.
  • For the regular postgres roles, authentication based on postgres passwords is used.

NOTE: for the <Databricks> identity type GROUP, LAKEBASE_OAUTH_V1 is the default auth method (group can login as well).

Values: AUTH_METHOD_UNSPECIFIED, NO_LOGIN, PG_PASSWORD_SCRAM_SHA_256, LAKEBASE_OAUTH_V1

postgres_rolestring

The name of the Postgres role.

This expects a valid Postgres identifier as specified in the link below. https://www.postgresql.org/docs/current/sql-syntax-lexical.html#SQL-SYNTAX-IDENTIFIERS

Required when creating the Role.

If you wish to create a Postgres Role backed by a managed <Databricks> identity, then postgres_role must be one of the following:

1. user email for IdentityType.USER
2. app ID for IdentityType.SERVICE_PRINCIPAL
2. group name for IdentityType.GROUP
statusobject

Current status of the role, including its identity type, authentication method, and role attributes.

Show child attributesHide child attributes
membership_rolesarray of string

An enum value for a standard role that this role is a member of.

Values: MEMBERSHIP_ROLE_UNSPECIFIED, DATABRICKS_SUPERUSER

identity_typestring

The type of the role.

Values: IDENTITY_TYPE_UNSPECIFIED, USER, SERVICE_PRINCIPAL, GROUP

attributesobject

The PG role attributes associated with the role.

Show child attributesHide child attributes
createdbboolean
createroleboolean
bypassrlsboolean
auth_methodstring

Values: AUTH_METHOD_UNSPECIFIED, NO_LOGIN, PG_PASSWORD_SCRAM_SHA_256, LAKEBASE_OAUTH_V1

postgres_rolestring

The name of the Postgres role.

role_idstring

Part of the resource name.

role_idstring

The part of the name, chosen by the user when the resource was created.

update_maskstringquery

The list of fields to update.

Response​

namestring

The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the name should be a resource name ending with operations/{unique_id}.

metadataobject

Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata.

doneboolean

If the value is false, it means the operation is still in progress. If true, the operation is completed, and either error or response is available.

errorobjectRequired

The error result of the operation in case of failure or cancellation.

Show child attributesHide child attributes
error_codestring

Values: UNKNOWN, INTERNAL_ERROR, TEMPORARILY_UNAVAILABLE, IO_ERROR, BAD_REQUEST, SERVICE_UNDER_MAINTENANCE, WORKSPACE_TEMPORARILY_UNAVAILABLE, DEADLINE_EXCEEDED, CANCELLED, RESOURCE_EXHAUSTED, ABORTED, NOT_FOUND, ALREADY_EXISTS, UNAUTHENTICATED, UNAVAILABLE, INVALID_PARAMETER_VALUE, ENDPOINT_NOT_FOUND, MALFORMED_REQUEST, INVALID_STATE, PERMISSION_DENIED, FEATURE_DISABLED, CUSTOMER_UNAUTHORIZED, REQUEST_LIMIT_EXCEEDED, RESOURCE_CONFLICT, UNPARSEABLE_HTTP_ERROR, NOT_IMPLEMENTED, DATA_LOSS, INVALID_STATE_TRANSITION, COULD_NOT_ACQUIRE_LOCK, RESOURCE_ALREADY_EXISTS, RESOURCE_DOES_NOT_EXIST, QUOTA_EXCEEDED, MAX_BLOCK_SIZE_EXCEEDED, MAX_READ_SIZE_EXCEEDED, PARTIAL_DELETE, MAX_LIST_SIZE_EXCEEDED, DRY_RUN_FAILED, RESOURCE_LIMIT_EXCEEDED, DIRECTORY_NOT_EMPTY, DIRECTORY_PROTECTED, MAX_NOTEBOOK_SIZE_EXCEEDED, MAX_CHILD_NODE_SIZE_EXCEEDED, SEARCH_QUERY_TOO_LONG, SEARCH_QUERY_TOO_SHORT, MANAGED_RESOURCE_GROUP_DOES_NOT_EXIST, PERMISSION_NOT_PROPAGATED, DEPLOYMENT_TIMEOUT, GIT_CONFLICT, GIT_UNKNOWN_REF, GIT_SENSITIVE_TOKEN_DETECTED, GIT_URL_NOT_ON_ALLOW_LIST, GIT_REMOTE_ERROR, PROJECTS_OPERATION_TIMEOUT, IPYNB_FILE_IN_REPO, INSECURE_PARTNER_RESPONSE, MALFORMED_PARTNER_RESPONSE, METASTORE_DOES_NOT_EXIST, DAC_DOES_NOT_EXIST, CATALOG_DOES_NOT_EXIST, SCHEMA_DOES_NOT_EXIST, TABLE_DOES_NOT_EXIST, SHARE_DOES_NOT_EXIST, RECIPIENT_DOES_NOT_EXIST, STORAGE_CREDENTIAL_DOES_NOT_EXIST, EXTERNAL_LOCATION_DOES_NOT_EXIST, PRINCIPAL_DOES_NOT_EXIST, PROVIDER_DOES_NOT_EXIST, METASTORE_ALREADY_EXISTS, DAC_ALREADY_EXISTS, CATALOG_ALREADY_EXISTS, SCHEMA_ALREADY_EXISTS, TABLE_ALREADY_EXISTS, SHARE_ALREADY_EXISTS, RECIPIENT_ALREADY_EXISTS, STORAGE_CREDENTIAL_ALREADY_EXISTS, EXTERNAL_LOCATION_ALREADY_EXISTS, PROVIDER_ALREADY_EXISTS, CATALOG_NOT_EMPTY, SCHEMA_NOT_EMPTY, METASTORE_NOT_EMPTY, PROVIDER_SHARE_NOT_ACCESSIBLE

messagestring
stack_tracestring
detailsarray of object
responseobjectRequired

The normal, successful response of the operation.

Delete GA​

DELETE /api/2.0/postgres/{name=projects/*/branches/*/roles/*}

Deletes the specified Postgres role.

API scopes: postgres

Parameters​

namestringpath

The full resource path of the role to delete. Format: projects/{project_id}/branches/{branch_id}/roles/{role_id}

reassign_owned_tostringquery

Reassign objects. If this is set, all objects owned by the role are reassigned to the role specified in this parameter.

NOTE: setting this requires spinning up a compute to succeed, since it involves running SQL queries.

Response​

namestring

The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the name should be a resource name ending with operations/{unique_id}.

metadataobject

Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata.

doneboolean

If the value is false, it means the operation is still in progress. If true, the operation is completed, and either error or response is available.

errorobjectRequired

The error result of the operation in case of failure or cancellation.

Show child attributesHide child attributes
error_codestring

Values: UNKNOWN, INTERNAL_ERROR, TEMPORARILY_UNAVAILABLE, IO_ERROR, BAD_REQUEST, SERVICE_UNDER_MAINTENANCE, WORKSPACE_TEMPORARILY_UNAVAILABLE, DEADLINE_EXCEEDED, CANCELLED, RESOURCE_EXHAUSTED, ABORTED, NOT_FOUND, ALREADY_EXISTS, UNAUTHENTICATED, UNAVAILABLE, INVALID_PARAMETER_VALUE, ENDPOINT_NOT_FOUND, MALFORMED_REQUEST, INVALID_STATE, PERMISSION_DENIED, FEATURE_DISABLED, CUSTOMER_UNAUTHORIZED, REQUEST_LIMIT_EXCEEDED, RESOURCE_CONFLICT, UNPARSEABLE_HTTP_ERROR, NOT_IMPLEMENTED, DATA_LOSS, INVALID_STATE_TRANSITION, COULD_NOT_ACQUIRE_LOCK, RESOURCE_ALREADY_EXISTS, RESOURCE_DOES_NOT_EXIST, QUOTA_EXCEEDED, MAX_BLOCK_SIZE_EXCEEDED, MAX_READ_SIZE_EXCEEDED, PARTIAL_DELETE, MAX_LIST_SIZE_EXCEEDED, DRY_RUN_FAILED, RESOURCE_LIMIT_EXCEEDED, DIRECTORY_NOT_EMPTY, DIRECTORY_PROTECTED, MAX_NOTEBOOK_SIZE_EXCEEDED, MAX_CHILD_NODE_SIZE_EXCEEDED, SEARCH_QUERY_TOO_LONG, SEARCH_QUERY_TOO_SHORT, MANAGED_RESOURCE_GROUP_DOES_NOT_EXIST, PERMISSION_NOT_PROPAGATED, DEPLOYMENT_TIMEOUT, GIT_CONFLICT, GIT_UNKNOWN_REF, GIT_SENSITIVE_TOKEN_DETECTED, GIT_URL_NOT_ON_ALLOW_LIST, GIT_REMOTE_ERROR, PROJECTS_OPERATION_TIMEOUT, IPYNB_FILE_IN_REPO, INSECURE_PARTNER_RESPONSE, MALFORMED_PARTNER_RESPONSE, METASTORE_DOES_NOT_EXIST, DAC_DOES_NOT_EXIST, CATALOG_DOES_NOT_EXIST, SCHEMA_DOES_NOT_EXIST, TABLE_DOES_NOT_EXIST, SHARE_DOES_NOT_EXIST, RECIPIENT_DOES_NOT_EXIST, STORAGE_CREDENTIAL_DOES_NOT_EXIST, EXTERNAL_LOCATION_DOES_NOT_EXIST, PRINCIPAL_DOES_NOT_EXIST, PROVIDER_DOES_NOT_EXIST, METASTORE_ALREADY_EXISTS, DAC_ALREADY_EXISTS, CATALOG_ALREADY_EXISTS, SCHEMA_ALREADY_EXISTS, TABLE_ALREADY_EXISTS, SHARE_ALREADY_EXISTS, RECIPIENT_ALREADY_EXISTS, STORAGE_CREDENTIAL_ALREADY_EXISTS, EXTERNAL_LOCATION_ALREADY_EXISTS, PROVIDER_ALREADY_EXISTS, CATALOG_NOT_EMPTY, SCHEMA_NOT_EMPTY, METASTORE_NOT_EMPTY, PROVIDER_SHARE_NOT_ACCESSIBLE

messagestring
stack_tracestring
detailsarray of object
responseobjectRequired

The normal, successful response of the operation.