Databricks

Overview

The Databricks integration connects a Databricks workspace to Oneleet, syncing workspace users as user account assets and the workspace itself as an asset. This lets Oneleet monitor who has access to your Databricks workspace.

What does Oneleet monitor?

• Databricks workspace users (user accounts), including their group memberships and whether they’re deactivated
• The Databricks workspace, including whether personal access tokens are enabled and the maximum lifetime of new tokens

Setup

To set up the Databricks integration, navigate to Integrations > Add integration > Databricks.

Oneleet connects with a Databricks service principal using OAuth machine-to-machine credentials. You need to be a workspace admin to create one.

Connection process

1. In Databricks, go to Settings > Identity and access > Service principals and add a new service principal.
2. On the service principal’s Configurations tab, enable Admin access.
3. On its Secrets tab, generate an OAuth secret with the scim and settings scopes.
4. In Oneleet, enter the Client ID, the Secret, and your workspace hostname (for example dbc-a1b2345c-d6e7.cloud.databricks.com).

Oneleet only reads users and workspace settings; the scim and settings scopes restrict the secret to those APIs.

Reconnecting

OAuth secrets expire after the lifetime you chose. Generate a new secret on the service principal and update the integration’s credentials before the old one expires.