Manage users

This article explains how to add, update, and remove SAP Databricks users.

To manage access for users, see Authentication and access control.

Overview of user management

To manage users in SAP Databricks, you must be either an account admin or a workspace admin.

• Account admins can add users to the account and assign them admin roles. They can also assign users to workspaces and configure data access for them across workspaces.

• Workspace admins can add users to a Databricks workspace, assign them the workspace admin role, and manage access to objects and functionality in the workspace. Adding a user to a Databricks workspace also adds them to the account.

  Workspace admins are members of the admins group in the workspace, which is a reserved group that cannot be deleted.

Sync users to your SAP Databricks account using SAP Cloud Identity Services

Account admins can sync users from your SAP Cloud Identity Services application. For more information, see the SAP documentation.

Manage users in your account

Account admins can add users to your SAP Databricks account using the account console.

Users in an SAP Databricks account do not have any default access to a workspace, data, or compute resources. Users must be explicitly added to workspaces, after which they will have access to some default data and serverless compute.

Add users to your account using the account console

1. As an account admin, log in to the account console.
2. In the sidebar, click User management.
3. On the Users tab, click Add User.
4. Enter a name and email address for the user.
5. Click Add user.

To give users access to a workspace, you must add them to the workspace. See Manage users in your workspace.

Assign account admin roles to a user

1. As an account admin, log in to the account console.
2. In the sidebar, click User management.
3. Find and click the username.
4. On the Roles tab, turn on Account admin or Marketplace admin.

Assign a user to a workspace using the account console

1. As an account admin, log in to the account console.
2. In the sidebar, click Workspaces.
3. Click your workspace name.
4. On the Permissions tab, click Add permissions.
5. Search for and select the user, assign the permission level (workspace User or Admin), and click Save.

Remove a user from a workspace using the account console

When a user is removed from a workspace, the user can no longer access the workspace, however permissions are maintained on the user. If the user is later added back to the workspace, they regain their previous permissions.

1. As an account admin, log in to the account console
2. In the sidebar, click Workspaces.
3. Click your workspace name.
4. On the Permissions tab, find the user.
5. Click the kebab menu at the far right of the user row and select Remove.
6. On the confirmation dialog, click Remove.

Remove users from your SAP Databricks account

Account admins can delete users from a Databricks account. Workspace admins cannot. When you delete a user from the account, that user is also removed from their workspaces. If you remove a user using the account console, if you have synchronized your SAP Databricks account with SAP Cloud Identity Services, you must ensure that you also remove the user using SAP Cloud Identity Services, Identity Provisioning. If you don't, SCIM provisioning adds the user back the next time it syncs.

When a user is removed from an account, the user can no longer access the account or their workspaces, however, permissions are maintained on the user. If the user is later added back to the account, they regain their previous permissions.

To remove a user using the account console, do the following:

1. As an account admin, log in to the account console
2. In the sidebar, click User management.
3. Find and click the username.
4. On the User Information tab, click the kebab menu in the upper-right corner and select Delete user.
5. On the confirmation dialog, click Confirm delete.

Manage users in your workspace

Workspace admins can add and manage users using the workspace admin settings page.

Assign a user to a workspace using the workspace admin settings page

To add a user to a workspace using the workspace admin settings page, do the following:

1. As a workspace admin, log in to the SAP Databricks workspace.

2. Click your username in the top bar of the SAP Databricks workspace and select Settings.

3. Click on the Identity and access tab.

4. Next to Users, click Manage.

5. Click Add User.

6. Select an existing user to assign to the workspace or click Add new to create a new user.

7. Click Add.

   Databricks sends a confirmation email. If the user does not receive the confirmation email within five minutes, ask the user to check their spam folder. Adding a new user to your workspace also adds the user to your SAP Databricks account.

Assign the workspace admin role to a user using the workspace admin settings page

To assign the workspace admin role using the workspace admin settings page, do the following:

1. As a workspace admin, log in to the SAP Databricks workspace.
2. Click your username in the top bar of the SAP Databricks workspace and select Settings.
3. Click on the Identity and access tab.
4. Next to Users, click Manage.
5. Select the user.
6. Click the toggle next to Admin access.

To remove the workspace admin role from a workspace user, perform the same steps, but clear the Admin access toggle.

Remove a user from a workspace using the workspace admin settings page

When a user is removed from a workspace, the user can no longer access the workspace, however permissions are maintained on the user. If the user is later added back to the workspace, they regain their previous permissions.

1. As a workspace admin, log in to the SAP Databricks workspace.
2. Click your username in the top bar of the SAP Databricks workspace and select Settings.
3. Click on the Identity and access tab.
4. Next to Users, click Manage.
5. Find the user and kebab menu at the far right of the user row and select Remove.
6. Click Delete to confirm.