terraform-provider-databricks icon indicating copy to clipboard operation
terraform-provider-databricks copied to clipboard

[FEATURE] Create a databricks_mws_permission_assignments resource that can resolve configuration drift

Open DSollick opened this issue 1 year ago • 0 comments

Use-cases

databricks_mws_permission_assignment objects do not detect workspace-wide configuration drift such as additional groups being added to the workspace that are not defined in IAC which would be very useful to have in the style of databricks_grants.

Proposal

Create a mws_permission_assignments resource that takes a workspace id, and n amount of principal blocks.

resource "mws_permission_assignments" "self" {
  workspace_id = "workspace_id"
  assignment {
    principal_id = "principal_1_id"
    permissions  = ["ADMIN"]
  }
  assignment {
    principal_id = "principal_2_id"
    permissions  = ["USER"]
  }
}

Both principal_id and permissions are required fields. It should be possible to have 0 assignment blocks in order to clear all permissions.

DSollick avatar Jun 24 '24 19:06 DSollick