Override partner OAuth token lifetime policy

This article describes how to override the OAuth token lifetime policy for existing partner OAuth applications.

Note

Updates to partner OAuth applications can take 30 minutes to process.

Before you begin

Before you override the OAuth token lifetime policy, do the following:

Install the Databricks CLI and set up authentication between the Databricks CLI and your Databricks account.
Locate your account ID.
Locate the integration ID of the OAuth application you want to modify.
- For dbt Core, Power BI, or Tableau Desktop, run the following command:
```
databricks account published-app-integration list
```
- For Tableau Cloud or Tableau Server, run the following command:
```
databricks account custom-app-integration list
```
The unique integration ID for each OAuth application is returned.

Override the default token lifetime policy for dbt Core, Power BI, or Tableau Desktop

To override the default token lifecycle policy (token_access_policy) for dbt Core, Power BI, or Tableau Desktop, run the following command:

databricks account published-app-integration update <integration-id> --json '{"token_access_policy": {"access_token_ttl_in_minutes": <new-access-token-ttl>,"refresh_token_ttl_in_minutes":<new-refresh-token-ttl>}}'

Replace <integration-id> with either databricks-dbt-adapter, power-bi, or tableau-desktop.
Replace <new-access-token-ttl> with the new access token lifetime.
Replace <new-refresh-token-ttl> with the new refresh token lifetime.

Override the default token lifetime policy for Tableau Cloud or Tableau Server

To override the default token lifecycle policy (token_access_policy) for Tableau Cloud or Tableau Server, run the following command:

databricks account custom-app-integration update <integration-id> --json '{"token_access_policy": {"access_token_ttl_in_minutes": <new-access-token-ttl>,"refresh_token_ttl_in_minutes":<new-refresh-token-ttl>}}'

Replace <integration-id> with the integration ID of the OAuth application you want to modify.
Replace <new-access-token-ttl> with the new access token lifetime.
Replace <new-refresh-token-ttl> with the new refresh token lifetime.