terraform-provider-databricks
terraform-provider-databricks copied to clipboard
[FEATURE] Create a databricks_mws_permission_assignments resource that can resolve configuration drift
Use-cases
databricks_mws_permission_assignment objects do not detect workspace-wide configuration drift such as additional groups being added to the workspace that are not defined in IAC which would be very useful to have in the style of databricks_grants.
Proposal
Create a mws_permission_assignments resource that takes a workspace id, and n amount of principal blocks.
resource "mws_permission_assignments" "self" {
workspace_id = "workspace_id"
assignment {
principal_id = "principal_1_id"
permissions = ["ADMIN"]
}
assignment {
principal_id = "principal_2_id"
permissions = ["USER"]
}
}
Both principal_id and permissions are required fields. It should be possible to have 0 assignment blocks in order to clear all permissions.