Skip to content

Setting Up Multiple Databricks Workspaces in Databricks FGAC

This is applicable only to Self Managed Deployments

If you have multiple Databricks Workspaces, then Privacera can manage the access permissions for all of them using the same Access Policies. To do this, you need to set up multiple Databricks Workspaces in the Privacera Manager.

Setup

To set up multiple Databricks Workspaces, perform the following steps:

  1. SSH to the instance where Privacera Manager is installed.
  2. Open the vars.databricks.plugin.yml file:
    Bash
    cd ~/privacera/privacera-manager/config/custom-vars
    vi vars.databricks.plugin.yml
    
  3. Add or update the following properties in the file, ensuring that the databricks_host_url and token values are updated accordingly for each workspace:
    YAML
    #Update databricks url and token
    DATABRICKS_HOST_URL: "https://<workspace>.cloud.databricks.com"
    DATABRICKS_TOKEN: "<workspace_token>"
    
    #Add your new workspace with example below
    #databricks_host_url, token will be set by the above parameters DATABRICKS_HOST_URL, DATABRICKS_TOKEN.
    DATABRICKS_WORKSPACES_LIST:
      - alias: "DEFAULT"
        databricks_host_url: "{{DATABRICKS_HOST_URL}}"
        token: "{{DATABRICKS_TOKEN}}"
    
      - alias: "WORKSPACE1"
        databricks_host_url: "https://<workspace1>.cloud.databricks.com"
        token: "<workspace1_token>"
    
      - alias: "WORKSPACE2"
        databricks_host_url: "https://<workspace2>.cloud.databricks.com"
        token: "<workspace2_token>"
    
  4. Once the properties are configured, run the following commands to generate and upload the configuration:
    Bash
    1
    2
    3
    cd ~/privacera/privacera-manager
    ./privacera-manager.sh setup
    ./pm_with_helm.sh upgrade 
    

Run the following command to run the post install steps:

Bash
cd ~/privacera/privacera-manager
./privacera-manager.sh post-install
5. Use the updated ranger_enable.sh script in Databricks cluster creation. 6. Click on Start or, if the cluster is running, click on Confirm and Restart.

Comments