Skip to content

Use Service Principal Id for Authorization in Databricks Clusters with FGAC

By Default Privacera use display name for Service Principal, if you want to use Service Principal Id then perform following steps:

  1. Login to Databricks workspace.
  2. In the left-hand sidebar, click on Compute.
  3. Choose the cluster where you want to configure the Service Principal Id.
  4. Click on Edit -> Advanced options.
  5. Click on the Spark tab.
  6. Add below property in Spark config
    Bash
    1
    spark.hadoop.privacera.fgac.use.displayname false
  7. Click on Confirm.
  8. Click on Start, or if the cluster is running, click on Restart.

You will have to create the policies for the Service Principal Id

  • For example, if your Service Principal Id is 12345678-1234-1234-1234-123456789012, then create the policies for 12345678-1234-1234-1234-123456789012 instead of display_name.

If you delete the Service Principal and recreate it, then the ID changes. So make sure to update your policies with the new ID

Comments