All integrations

Databricks

DATA · DATA & ANALYTICS

Clusters, jobs, SQL warehouses, and Unity Catalog in their own workspace.

Acts as the person, not as itself

Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.

Credentials never touch the agent

Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.

Every call on the record

Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.

What an agent can do

Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.

databricks_access_control_check_policyREAD

Check access policy to a resource. GET /api/2.0/access-control/check-policy-v2 on Databricks. Requires actor, permission, resource, consistency_token, authz_identity.

iam:read
databricks_account_access_control_proxy_get_assignable_roles_for_resourceREAD

Gets all the roles that can be granted on an account level resource. A role is grantable if the rule set on the resource can contain an access rule of the role.

iam:read
databricks_account_access_control_proxy_get_rule_setREAD

Get a rule set by its name. A rule set is always attached to a resource and contains a list of access rules on the said resource. Currently only a default rule set for each resource is supported.

iam:read
databricks_account_iam_v2_create_account_access_identity_ruleWRITE

Creates a new account access identity rule for a given account. This allows administrators to explicitly allow or deny specific principals from accessing the account.

iam:write
databricks_account_iam_v2_create_attribute_control_entryWRITE

Creates (allows) an identity attribute control-list entry for an account.

iam:write
databricks_account_iam_v2_delete_account_access_identity_ruleWRITE

DESTRUCTIVE - Deletes an account access identity rule for a given principal.

iam:write
databricks_account_iam_v2_delete_attribute_control_entryWRITE

DESTRUCTIVE - Deletes an identity attribute control-list entry.

iam:write
databricks_account_iam_v2_get_account_access_identity_ruleREAD

Gets an account access identity rule for a given principal.

iam:read
databricks_account_iam_v2_get_attribute_control_entryREAD

Gets an identity attribute control-list entry.

iam:read
databricks_account_iam_v2_get_external_groupREAD

Retrieves an external group with the given external ID from the customer's IdP. If the group does not exist, it will be created in the account. If the customer is not onboarded onto Automatic Identity Management (AIM), this will return an error.

iam:read
databricks_account_iam_v2_get_external_service_principalREAD

Retrieves an external service principal with the given external ID from the customer's IdP. If the service principal does not exist, it will be created. If the customer is not onboarded onto Automatic Identity Management (AIM), this will return an error.

iam:read
databricks_account_iam_v2_get_external_userREAD

Retrieves an external user with the given external ID from the customer's IdP. If the user does not exist, it will be created. If the customer is not onboarded onto Automatic Identity Management (AIM), this will return an error.

iam:read
databricks_account_iam_v2_list_account_access_identity_rulesREAD

Lists all account access identity rules for a given account. These rules control which principals (users, service principals, groups) from the customer's IdP are allowed or denied access to the Databricks account.

iam:read
databricks_account_iam_v2_list_attribute_control_entriesREAD

Lists the identity attribute control-list entries for an account.

iam:read
databricks_account_iam_v2_update_attribute_control_entryWRITE

Updates an identity attribute control-list entry for an account.

iam:write
databricks_agent_bricks_cancel_optimizeWRITE

DESTRUCTIVE - Cancel a Custom LLM Optimization Run.

ml:write
databricks_agent_bricks_create_custom_llmWRITE

Create a Custom LLM. POST /api/2.0/custom-llms on Databricks. Requires name, instructions.

ml:write
databricks_agent_bricks_delete_custom_llmWRITE

DESTRUCTIVE — Delete a Custom LLM. DELETE /api/2.0/custom-llms/{id} on Databricks. Requires id.

ml:write
databricks_agent_bricks_get_custom_llmREAD

Get a Custom LLM. GET /api/2.0/custom-llms/{id} on Databricks. Requires id.

ml:read
databricks_agent_bricks_start_optimizeWRITE

Start a Custom LLM Optimization Run. POST /api/2.0/custom-llms/{id}/optimize on Databricks. Requires id.

ml:write
databricks_agent_bricks_update_custom_llmWRITE

Update a Custom LLM. PATCH /api/2.0/custom-llms/{id} on Databricks. Requires id, custom_llm, update_mask.

ml:write
databricks_ai_gateway_create_agent_serviceWRITE

Creates an agent service in a Unity Catalog schema. An agent service is a governed securable that registers an AI agent and exposes it for discovery, access control, and auditing. The caller supplies the leaf name in ``agent_service_id`` and the agent...

catalog:write
databricks_ai_gateway_create_mcp_serviceWRITE

Creates an MCP service in a Unity Catalog schema. An MCP (Model Context Protocol) service is a governed securable that registers an MCP server and exposes its tools for discovery, access control, and invocation. The caller supplies the leaf name in...

catalog:write
databricks_ai_gateway_create_model_provider_serviceWRITE

Creates a model provider service in a Unity Catalog schema. A model provider service is a governed connection to an external model provider (for example OpenAI, Azure OpenAI, or Amazon Bedrock) that model services reference to invoke that provider. The...

catalog:write
databricks_ai_gateway_create_model_serviceWRITE

Creates a model service in a Unity Catalog schema. A model service is a governed AI Gateway endpoint that routes inference requests to one or more model destinations. The caller supplies the leaf name in ``model_service_id``. You must be the owner of the...

catalog:write
databricks_ai_gateway_delete_agent_serviceWRITE

DESTRUCTIVE - Deletes the agent service identified by its resource name. Optionally supply an ``etag`` to make the delete conditional on the agent service not having changed since it was read. You must be the owner of the agent service or have ``MANAGE`` on...

catalog:write
databricks_ai_gateway_delete_mcp_serviceWRITE

DESTRUCTIVE - Deletes the MCP service identified by its resource name. Optionally supply an ``etag`` to make the delete conditional on the MCP service not having changed since it was read. You must be the owner of the MCP service or have ``MANAGE`` on it...

catalog:write
databricks_ai_gateway_delete_model_provider_serviceWRITE

DESTRUCTIVE - Deletes the model provider service identified by its resource name. Optionally supply an ``etag`` to make the delete conditional on the model provider service not having changed since it was read. You must be the owner of the model provider...

catalog:write
databricks_ai_gateway_delete_model_serviceWRITE

DESTRUCTIVE - Deletes the model service identified by its resource name. Optionally supply an ``etag`` to make the delete conditional on the model service not having changed since it was read. You must be the owner of the model service or have ``MANAGE`` on...

catalog:write
databricks_ai_gateway_get_agent_serviceREAD

Returns the agent service identified by its resource name. You must be the owner of the agent service or have ``EXECUTE``, ``READ_METADATA``, or ``MANAGE`` on it, plus ``USE_CATALOG`` on the parent catalog and ``USE_SCHEMA`` on the parent schema.

catalog:read
databricks_ai_gateway_get_mcp_serviceREAD

Returns the MCP service identified by its resource name. You must be the owner of the MCP service or have ``EXECUTE``, ``READ_METADATA``, or ``MANAGE`` on it, plus ``USE_CATALOG`` on the parent catalog and ``USE_SCHEMA`` on the parent schema.

catalog:read
databricks_ai_gateway_get_model_provider_serviceREAD

Returns the model provider service identified by its resource name. You must be the owner of the model provider service or have ``EXECUTE``, ``READ_METADATA``, or ``MANAGE`` on it, plus ``USE_CATALOG`` on the parent catalog and ``USE_SCHEMA`` on the parent...

catalog:read
databricks_ai_gateway_get_model_serviceREAD

Returns the model service identified by its resource name. You must be the owner of the model service or have ``EXECUTE``, ``READ_METADATA``, or ``MANAGE`` on it, plus ``USE_CATALOG`` on the parent catalog and ``USE_SCHEMA`` on the parent schema.

catalog:read
databricks_ai_gateway_list_agent_servicesREAD

Lists the agent services in a Unity Catalog schema. Provide ``parent`` as ``schemas/{catalog}.{schema}``. Results are paginated; pass the returned ``next_page_token`` to fetch subsequent pages. Requires ``USE_CATALOG`` on the parent catalog and...

catalog:read
databricks_ai_gateway_list_mcp_servicesREAD

Lists the MCP services in a Unity Catalog schema. Provide ``parent`` as ``schemas/{catalog}.{schema}``. Results are paginated; pass the returned ``next_page_token`` to fetch subsequent pages. Requires ``USE_CATALOG`` on the parent catalog and ``USE_SCHEMA``...

catalog:read
databricks_ai_gateway_list_model_provider_servicesREAD

Lists the model provider services in a Unity Catalog schema. Provide ``parent`` as ``schemas/{catalog}.{schema}``. Results are paginated; pass the returned ``next_page_token`` to fetch subsequent pages. Requires ``USE_CATALOG`` on the parent catalog and...

catalog:read
databricks_ai_gateway_list_model_servicesREAD

Lists the model services in a Unity Catalog schema. Provide ``parent`` as ``schemas/{catalog}.{schema}``. Results are paginated; pass the returned ``next_page_token`` to fetch subsequent pages. Requires ``USE_CATALOG`` on the parent catalog and...

catalog:read
databricks_ai_gateway_update_agent_serviceWRITE

Updates an agent service. Only the fields named in ``update_mask`` are changed; the resource name and agent service type are immutable. Optionally supply an ``etag`` to make the update conditional on the agent service not having changed since it was read...

catalog:write
databricks_ai_gateway_update_mcp_serviceWRITE

Updates an MCP service. Only the fields named in ``update_mask`` are changed; the resource name is immutable. Optionally supply an ``etag`` to make the update conditional on the MCP service not having changed since it was read. You must be the owner of the...

catalog:write
databricks_ai_gateway_update_model_provider_serviceWRITE

Updates a model provider service. Only the fields named in ``update_mask`` are changed; the resource name and provider type are immutable. Optionally supply an ``etag`` to make the update conditional on the model provider service not having changed since it...

catalog:write
databricks_ai_gateway_update_model_serviceWRITE

Updates a model service. Only the fields named in ``update_mask`` are changed; the resource name is immutable. Optionally supply an ``etag`` to make the update conditional on the model service not having changed since it was read. You must be the owner of...

catalog:write
databricks_ai_search_create_endpointWRITE

Create a new AI Search endpoint. POST /api/2.0/ai-search/{parent}/endpoints on Databricks. Requires parent.

ml:write
databricks_ai_search_create_indexWRITE

Create a new AI Search index. POST /api/2.0/ai-search/{parent}/indexes on Databricks. Requires parent.

ml:write
databricks_ai_search_delete_endpointWRITE

DESTRUCTIVE - Delete an AI Search endpoint.

ml:write
databricks_ai_search_delete_indexWRITE

DESTRUCTIVE - Delete an AI Search index.

ml:write
databricks_ai_search_get_endpointREAD

Get details for a single AI Search endpoint.

ml:read
databricks_ai_search_get_indexREAD

Get details for a single AI Search index.

ml:read
databricks_ai_search_list_endpointsREAD

List AI Search endpoints in a workspace.

ml:read
databricks_ai_search_list_indexesREAD

List AI Search indexes on an endpoint. GET /api/2.0/ai-search/{parent}/indexes on Databricks. Requires parent.

ml:read
databricks_ai_search_query_indexWRITE

Query (search) an AI Search index. Read-only, so a read-scoped token may invoke it.

ml:write
databricks_ai_search_remove_dataWRITE

DESTRUCTIVE - Remove rows by primary key from a Direct Access AI Search index.

ml:write
databricks_ai_search_scan_indexWRITE

Scan (paginate over) the rows of an AI Search index.

ml:write
databricks_ai_search_sync_indexWRITE

Synchronize a Delta Sync AI Search index with its source Delta table. Applies only to Delta Sync indexes; Direct Access indexes are written via the data-plane upsert path.

ml:write
databricks_ai_search_update_endpointWRITE

Update an existing AI Search endpoint. Multi-bucket masks are supported and dispatched in deterministic bucket order: budget policy, custom tags, throughput, then scaling/replicas. Per-bucket dispatch is not atomic across buckets — if a later bucket fails...

ml:write
databricks_ai_search_upsert_dataWRITE

Upsert rows into a Direct Access AI Search index.

ml:write
databricks_aibi_dashboard_embedding_access_policy_deleteWRITE

DESTRUCTIVE - Delete the AI/BI dashboard embedding access policy, reverting back to the default.

settings:write
databricks_aibi_dashboard_embedding_access_policy_getREAD

Retrieves the AI/BI dashboard embedding access policy. The default setting is ALLOW_APPROVED_DOMAINS, permitting AI/BI dashboards to be embedded on approved domains.

settings:read
databricks_aibi_dashboard_embedding_access_policy_updateWRITE

Updates the AI/BI dashboard embedding access policy at the workspace level.

settings:write
databricks_aibi_dashboard_embedding_approved_domains_deleteWRITE

DESTRUCTIVE - Delete the list of domains approved to host embedded AI/BI dashboards, reverting back to the default empty list.

settings:write
databricks_aibi_dashboard_embedding_approved_domains_getREAD

Retrieves the list of domains approved to host embedded AI/BI dashboards.

settings:read
databricks_aibi_dashboard_embedding_approved_domains_updateWRITE

Updates the list of domains approved to host embedded AI/BI dashboards. This update will fail if the current workspace access policy is not ALLOW_APPROVED_DOMAINS.

settings:write
databricks_alerts_createWRITE

Creates an alert. POST /api/2.0/sql/alerts on Databricks.

sql:write
databricks_alerts_deleteWRITE

DESTRUCTIVE - Moves an alert to the trash. Trashed alerts immediately disappear from searches and list views, and can no longer trigger. You can restore a trashed alert through the UI. A trashed alert is permanently deleted after 30 days.

sql:write
databricks_alerts_getREAD

Gets an alert. GET /api/2.0/sql/alerts/{id} on Databricks. Requires id.

sql:read
databricks_alerts_legacy_createWRITE

Creates an alert. An alert is a Databricks SQL object that periodically runs a query, evaluates a condition of its result, and notifies users or notification destinations if the condition was met. **Warning**: This API is deprecated. Please use...

sql:write
databricks_alerts_legacy_deleteWRITE

DESTRUCTIVE - Deletes an alert. Deleted alerts are no longer accessible and cannot be restored. **Note**: Unlike queries and dashboards, alerts cannot be moved to the trash. **Warning**: This API is deprecated. Please use :method:alerts/delete instead. `Learn...

sql:write
databricks_alerts_legacy_getREAD

Gets an alert. **Warning**: This API is deprecated. Please use :method:alerts/get instead. `Learn more `__

sql:read
databricks_alerts_legacy_listREAD

Gets a list of alerts. **Warning**: This API is deprecated. Please use :method:alerts/list instead. `Learn more `__

sql:read
databricks_alerts_legacy_updateWRITE

Updates an alert. **Warning**: This API is deprecated. Please use :method:alerts/update instead. `Learn more `__

sql:write
databricks_alerts_listREAD

Gets a list of alerts accessible to the user, ordered by creation time. **Warning:** Calling this API concurrently 10 or more times could result in throttling, service degradation, or a temporary ban.

sql:read
databricks_alerts_updateWRITE

Updates an alert. PATCH /api/2.0/sql/alerts/{id} on Databricks. Requires id, update_mask.

sql:write
databricks_alerts_v2_create_alertWRITE

Create Alert. POST /api/2.0/alerts on Databricks.

sql:write
databricks_alerts_v2_get_alertREAD

Gets an alert. GET /api/2.0/alerts/{id} on Databricks. Requires id.

sql:read
databricks_alerts_v2_list_alertsREAD

Gets a list of alerts accessible to the user, ordered by creation time.

sql:read
databricks_alerts_v2_trash_alertWRITE

DESTRUCTIVE - Moves an alert to the trash. Trashed alerts immediately disappear from list views, and can no longer trigger. You can restore a trashed alert through the UI. A trashed alert is permanently deleted after 30 days.

sql:write
databricks_alerts_v2_update_alertWRITE

Update alert. PATCH /api/2.0/alerts/{id} on Databricks. Requires id, update_mask.

sql:write
databricks_apps_createWRITE

Creates a new app. POST /api/2.0/apps on Databricks.

apps:write
databricks_apps_create_spaceWRITE

Creates a new app space. POST /api/2.0/app-spaces on Databricks.

apps:write
databricks_apps_create_updateWRITE

Creates an app update and starts the update process. The update process is asynchronous and the status of the update can be checked with the GetAppUpdate method.

apps:write
databricks_apps_deleteWRITE

DESTRUCTIVE — Deletes an app. DELETE /api/2.0/apps/{name} on Databricks. Requires name.

apps:write
databricks_apps_delete_app_thumbnailWRITE

DESTRUCTIVE - Deletes the thumbnail for an app.

apps:write
databricks_apps_delete_spaceWRITE

DESTRUCTIVE — Deletes an app space. DELETE /api/2.0/app-spaces/{name} on Databricks. Requires name.

apps:write
databricks_apps_deployWRITE

Creates an app deployment for the app with the supplied name.

apps:write
databricks_apps_getREAD

Retrieves information for the app with the supplied name.

apps:read
databricks_apps_get_deploymentREAD

Retrieves information for the app deployment with the supplied name and deployment id.

apps:read
databricks_apps_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

apps:read
databricks_apps_get_permissionsREAD

Gets the permissions of an app. Apps can inherit permissions from their root object.

apps:read
databricks_apps_get_spaceREAD

Retrieves information for the app space with the supplied name.

apps:read
databricks_apps_get_space_operationREAD

Gets the status of an app space update operation.

apps:read
databricks_apps_get_updateREAD

Gets the status of an app update. GET /api/2.0/apps/{app_name}/update on Databricks. Requires app_name.

apps:read
databricks_apps_listREAD

Lists all apps in the workspace. GET /api/2.0/apps on Databricks.

apps:read
databricks_apps_list_deploymentsREAD

Lists all app deployments for the app with the supplied name.

apps:read
databricks_apps_list_spacesREAD

Lists all app spaces in the workspace. GET /api/2.0/app-spaces on Databricks.

apps:read
databricks_apps_settings_create_custom_templateWRITE

Creates a custom template. POST /api/2.0/apps-settings/templates on Databricks.

apps:write
databricks_apps_settings_delete_custom_templateWRITE

DESTRUCTIVE - Deletes the custom template with the specified name.

apps:write
databricks_apps_settings_get_custom_templateREAD

Gets the custom template with the specified name.

apps:read
databricks_apps_settings_list_custom_templatesREAD

Lists all custom templates in the workspace.

apps:read
databricks_apps_settings_update_custom_templateWRITE

Updates the custom template with the specified name. Note that the template name cannot be updated.

apps:write
databricks_apps_startWRITE

Start the last active deployment of the app in the workspace.

apps:write
databricks_apps_stopWRITE

Stops the active deployment of the app in the workspace.

apps:write
databricks_apps_updateWRITE

Updates the app with the supplied name. PATCH /api/2.0/apps/{name} on Databricks. Requires name.

apps:write
databricks_apps_update_app_thumbnailWRITE

Updates the thumbnail for an app. PATCH /api/2.0/apps/{name}/thumbnail on Databricks. Requires name.

apps:write
databricks_apps_update_spaceWRITE

Updates an app space. The update process is asynchronous and the status of the update can be checked with the GetSpaceOperation method.

apps:write
databricks_automatic_cluster_update_getREAD

Gets the automatic cluster update setting.

settings:read
databricks_automatic_cluster_update_updateWRITE

Updates the automatic cluster update setting for the workspace. A fresh etag needs to be provided in ``PATCH`` requests (as part of the setting field). The etag can be retrieved by making a ``GET`` request before the ``PATCH`` request. If the setting is...

settings:write
databricks_bundle_complete_versionWRITE

Marks a version as complete and releases the deployment lock. The server atomically: 1. Sets the version status to the provided terminal status. 2. Sets `complete_time` to the current server timestamp. 3. Releases the lock on the parent deployment. 4...

jobs:write
databricks_bundle_create_deploymentWRITE

Creates a new deployment in the workspace. The caller must provide a `deployment_id` which becomes the final component of the deployment's resource name. If a deployment with the same ID already exists, the server returns `ALREADY_EXISTS`.

jobs:write
databricks_bundle_create_operationWRITE

Creates a resource operation under a version. The caller must provide a `resource_key` which becomes the final component of the operation's name. If an operation with the same key already exists under the version, the server returns `ALREADY_EXISTS`. On...

jobs:write
databricks_bundle_create_versionWRITE

Creates a new version under a deployment. Creating a version acquires an exclusive lock on the deployment, preventing concurrent deploys. The caller provides a `version_id` which the server validates equals `last_version_id + 1` on the deployment.

jobs:write
databricks_bundle_delete_deploymentWRITE

DESTRUCTIVE - Deletes a deployment. The deployment is marked as deleted. It and all its children (versions and their operations) will be permanently deleted after the retention policy expires. If the deployment has an in-progress version, the server returns...

jobs:write
databricks_bundle_deployments_complete_versionWRITE

Marks a version as complete and releases the deployment lock. The server atomically: 1. Sets the version status to the provided terminal status. 2. Sets ``complete_time`` to the current server timestamp. 3. Releases the lock on the parent deployment. 4...

jobs:write
databricks_bundle_deployments_create_deploymentWRITE

Creates a new deployment in the workspace.

jobs:write
databricks_bundle_deployments_create_versionWRITE

Creates a new version under a deployment. Creating a version acquires an exclusive lock on the deployment, preventing concurrent deploys. The caller provides a ``version_id``, a numeric string that must be numerically greater than the deployment's most...

jobs:write
databricks_bundle_deployments_delete_deploymentWRITE

DESTRUCTIVE — Deletes a deployment. DELETE /api/2.0/bundle/{name} on Databricks. Requires name.

jobs:write
databricks_bundle_deployments_get_deploymentREAD

Retrieves a deployment by its resource name.

jobs:read
databricks_bundle_deployments_get_operationREAD

Retrieves a resource operation by its resource name.

jobs:read
databricks_bundle_deployments_get_resourceREAD

Retrieves a deployment resource by its resource name.

jobs:read
databricks_bundle_deployments_get_versionREAD

Retrieves a version by its resource name.

jobs:read
databricks_bundle_deployments_heartbeatWRITE

Sends a heartbeat to renew the lock held by a version. The server validates that the version is the active (non-terminal) version on the parent deployment and resets the lock expiry. If the lock has already expired or the version is no longer active, the...

jobs:write
databricks_bundle_deployments_list_deploymentsREAD

Lists deployments in the workspace. GET /api/2.0/bundle/deployments on Databricks.

jobs:read
databricks_bundle_deployments_list_operationsREAD

Lists resource operations under a version.

jobs:read
databricks_bundle_deployments_list_resourcesREAD

Lists resources under a deployment. GET /api/2.0/bundle/{parent}/resources on Databricks. Requires parent.

jobs:read
databricks_bundle_deployments_list_versionsREAD

Lists versions under a deployment, ordered numerically by version_id descending (most recent first).

jobs:read
databricks_bundle_deployments_update_operationWRITE

Updates a resource operation's mutable fields. ``state``, ``error_message``, ``resource_id``, ``status``, and ``dashboard_metadata`` may be updated, independently; ``update_mask`` must contain only those paths. All other fields are immutable. The update is...

jobs:write
databricks_bundle_get_deploymentREAD

Retrieves a deployment by its resource name.

jobs:read
databricks_bundle_get_operationREAD

Retrieves a resource operation by its resource name.

jobs:read
databricks_bundle_get_resourceREAD

Retrieves a deployment resource by its resource name.

jobs:read
databricks_bundle_get_versionREAD

Retrieves a version by its resource name.

jobs:read
databricks_bundle_heartbeatWRITE

Sends a heartbeat to renew the lock held by a version. The server validates that the version is the active (non-terminal) version on the parent deployment and resets the lock expiry. If the lock has already expired or the version is no longer active, the...

jobs:write
databricks_bundle_list_deploymentsREAD

Lists deployments in the workspace. GET /api/2.0/bundle/deployments on Databricks.

jobs:read
databricks_bundle_list_operationsREAD

Lists resource operations under a version.

jobs:read
databricks_bundle_list_resourcesREAD

Lists resources under a deployment. GET /api/2.0/bundle/{parent}/resources on Databricks. Requires parent.

jobs:read
databricks_bundle_list_versionsREAD

Lists versions under a deployment, ordered by version_id descending (most recent first).

jobs:read
databricks_catalogs_createWRITE

Creates a new catalog instance in the parent metastore if the caller is a metastore admin or has the **CREATE_CATALOG** privilege.

catalog:write
databricks_catalogs_deleteWRITE

DESTRUCTIVE - Deletes the catalog that matches the supplied name. The caller must be a metastore admin or the owner of the catalog.

catalog:write
databricks_catalogs_getREAD

Gets the specified catalog in a metastore. The caller must be a metastore admin, the owner of the catalog, or a user that has the **USE_CATALOG** privilege set for their account.

catalog:read
databricks_catalogs_listREAD

Gets an array of catalogs in the metastore. If the caller is the metastore admin, all catalogs will be retrieved. Otherwise, only catalogs owned by the caller (or for which the caller has the **USE_CATALOG** privilege) will be retrieved. There is no...

catalog:read
databricks_catalogs_updateWRITE

Updates the catalog that matches the supplied name. The caller must be either the owner of the catalog, or a metastore admin (when changing the owner field of the catalog).

catalog:write
databricks_clean_room_assets_createWRITE

Create a clean room asset —share an asset like a notebook or table into the clean room. For each UC asset that is added through this method, the clean room owner must also have enough privilege on the asset to consume it. The privilege must be maintained...

cleanrooms:write
databricks_clean_room_assets_listREAD

List assets. GET /api/2.0/clean-rooms/{clean_room_name}/assets on Databricks. Requires clean_room_name.

cleanrooms:read
databricks_clean_room_auto_approval_rules_createWRITE

Create an auto-approval rule. POST /api/2.0/clean-rooms/{clean_room_name}/auto-approval-rules on Databricks. Requires clean_room_name, auto_approval_rule.

cleanrooms:write
databricks_clean_room_auto_approval_rules_deleteWRITE

DESTRUCTIVE - Delete a auto-approval rule by rule ID

cleanrooms:write
databricks_clean_room_auto_approval_rules_getREAD

Get a auto-approval rule by rule ID. GET /api/2.0/clean-rooms/{clean_room_name}/auto-approval-rules/{rule_id} on Databricks. Requires clean_room_name, rule_id.

cleanrooms:read
databricks_clean_room_auto_approval_rules_listREAD

List all auto-approval rules for the caller

cleanrooms:read
databricks_clean_room_auto_approval_rules_updateWRITE

Update a auto-approval rule by rule ID. PATCH /api/2.0/clean-rooms/{clean_room_name}/auto-approval-rules/{rule_id} on Databricks. Requires clean_room_name, rule_id.

cleanrooms:write
databricks_clean_room_task_runs_listREAD

List all the historical notebook task runs in a clean room.

cleanrooms:read
databricks_clean_room_task_runs_list_clean_room_task_runs_handlerREAD

List all the historical task runs in a clean room.

cleanrooms:read
databricks_clean_rooms_createWRITE

Create a new clean room with the specified collaborators. This method is asynchronous; the returned name field inside the clean_room field can be used to poll the clean room status, using the `cleanrooms/get `__ method. When this method returns, the clean...

cleanrooms:write
databricks_clean_rooms_create_output_catalogWRITE

Create the output catalog of the clean room.

cleanrooms:write
databricks_clean_rooms_deleteWRITE

DESTRUCTIVE - Delete a clean room. After deletion, the clean room will be removed from the metastore. If the other collaborators have not deleted the clean room, they will still have the clean room in their metastore, but it will be in a DELETED state and no...

cleanrooms:write
databricks_clean_rooms_getREAD

Get the details of a clean room given its name.

cleanrooms:read
databricks_clean_rooms_listREAD

Get a list of all clean rooms of the metastore. Only clean rooms the caller has access to are returned.

cleanrooms:read
databricks_clean_rooms_updateWRITE

Update a clean room. The caller must be the owner of the clean room, have **MODIFY_CLEAN_ROOM** privilege, or be metastore admin. When the caller is a metastore admin, only the **owner** field can be updated.

cleanrooms:write
databricks_cluster_policies_createWRITE

Creates a new policy with prescribed settings.

compute:write
databricks_cluster_policies_deleteWRITE

DESTRUCTIVE - Delete a policy for a cluster. Clusters governed by this policy can still run, but cannot be edited.

compute:write
databricks_cluster_policies_editWRITE

Update an existing policy for cluster. This operation may make some clusters governed by the previous policy invalid.

compute:write
databricks_cluster_policies_getREAD

Get a cluster policy entity. Creation and editing is available to admins only.

compute:read
databricks_cluster_policies_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

compute:read
databricks_cluster_policies_get_permissionsREAD

Gets the permissions of a cluster policy. Cluster policies can inherit permissions from their root object.

compute:read
databricks_cluster_policies_listREAD

Returns a list of policies accessible by the requesting user.

compute:read
databricks_clusters_change_ownerWRITE

Change the owner of the cluster. You must be an admin and the cluster must be terminated to perform this operation. The service principal application ID can be supplied as an argument to ``owner_username``.

compute:write
databricks_clusters_createWRITE

Creates a new Spark cluster. This method will acquire new instances from the cloud provider if necessary. This method is asynchronous; the returned ``cluster_id`` can be used to poll the cluster status. When this method returns, the cluster will be in a...

compute:write
databricks_clusters_deleteWRITE

DESTRUCTIVE - Terminates the Spark cluster with the specified ID. The cluster is removed asynchronously. Once the termination has completed, the cluster will be in a ``TERMINATED`` state. If the cluster is already in a ``TERMINATING`` or ``TERMINATED`` state...

compute:write
databricks_clusters_editWRITE

Updates the configuration of a cluster to match the provided attributes and size. A cluster can be updated if it is in a ``RUNNING`` or ``TERMINATED`` state. If a cluster is updated while in a ``RUNNING`` state, it will be restarted so that the new...

compute:write
databricks_clusters_eventsWRITE

Retrieves a list of events about the activity of a cluster. This API is paginated. If there are more events to read, the response includes all the parameters necessary to request the next page of events.

compute:write
databricks_clusters_getREAD

Retrieves the information for a cluster given its identifier. Clusters can be described while they are running, or up to 60 days after they are terminated.

compute:read
databricks_clusters_get_diagnosticREAD

Returns the most recent cluster diagnostics result for a cluster. Cluster diagnostics are a set of environment checks -- for example, network reachability to the control plane, storage, DNS, and the SCC tunnel -- that verify the cluster's environment is set...

compute:read
databricks_clusters_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

compute:read
databricks_clusters_get_permissionsREAD

Gets the permissions of a cluster. Clusters can inherit permissions from their root object.

compute:read
databricks_clusters_listREAD

Return information about all pinned and active clusters, and all clusters terminated within the last 30 days. Clusters terminated prior to this period are not included.

compute:read
databricks_clusters_list_node_typesREAD

Returns a list of supported Spark node types. These node types can be used to launch a cluster.

compute:read
databricks_clusters_list_zonesREAD

Returns a list of availability zones where clusters can be created in (For example, us-west-2a). These zones can be used to launch a cluster.

compute:read
databricks_clusters_permanent_deleteWRITE

DESTRUCTIVE - Permanently deletes a Spark cluster. This cluster is terminated and resources are asynchronously removed. In addition, users will no longer see permanently deleted clusters in the cluster list, and API users can no longer perform any action on...

compute:write
databricks_clusters_pinWRITE

Pinning a cluster ensures that the cluster will always be returned by the ListClusters API. Pinning a cluster that is already pinned will have no effect. This API can only be called by workspace admins.

compute:write
databricks_clusters_resizeWRITE

Resizes a cluster to have a desired number of workers. This will fail unless the cluster is in a ``RUNNING`` state.

compute:write
databricks_clusters_restartWRITE

DESTRUCTIVE - Restarts a Spark cluster with the supplied ID. If the cluster is not currently in a ``RUNNING`` state, nothing will happen.

compute:write
databricks_clusters_spark_versionsREAD

Returns the list of available Spark versions. These versions can be used to launch a cluster.

compute:read
databricks_clusters_startWRITE

Starts a terminated Spark cluster with the supplied ID. This works similar to ``createCluster`` except: - The previous cluster id and attributes are preserved. - The cluster starts with the last specified cluster size. - If the previous cluster was an...

compute:write
databricks_clusters_unpinWRITE

Unpinning a cluster will allow the cluster to eventually be removed from the ListClusters API. Unpinning a cluster that is not pinned will have no effect. This API can only be called by workspace admins.

compute:write
databricks_clusters_updateWRITE

Updates the configuration of a cluster to match the partial set of attributes and size. Denote which fields to update using the ``update_mask`` field in the request body. A cluster can be updated if it is in a ``RUNNING`` or ``TERMINATED`` state. If a...

compute:write
databricks_compliance_security_profile_getREAD

Gets the compliance security profile setting.

settings:read
databricks_compliance_security_profile_updateWRITE

Updates the compliance security profile setting for the workspace. A fresh etag needs to be provided in ``PATCH`` requests (as part of the setting field). The etag can be retrieved by making a ``GET`` request before the ``PATCH`` request. If the setting is...

settings:write
databricks_connections_createWRITE

Creates a new connection Creates a new connection to an external data source. It allows users to specify connection details and configurations for interaction with the external server.

catalog:write
databricks_connections_deleteWRITE

DESTRUCTIVE - Deletes the connection that matches the supplied name.

catalog:write
databricks_connections_getREAD

Gets a connection from it's name. GET /api/2.1/unity-catalog/connections/{name} on Databricks. Requires name.

catalog:read
databricks_connections_listREAD

List all connections. NOTE: we recommend using max_results=0 to use the paginated version of this API. Unpaginated calls will be deprecated soon. PAGINATION BEHAVIOR: When using pagination (max_results >= 0), a page may contain zero results while still...

catalog:read
databricks_connections_updateWRITE

Updates the connection that matches the supplied name.

catalog:write
databricks_consumer_fulfillments_getREAD

Get a high level preview of the metadata of listing installable content.

marketplace:read
databricks_consumer_fulfillments_listREAD

Get all listings fulfillments associated with a listing. A *fulfillment* is a potential installation. Standard installations contain metadata about the attached share or git repo. Only one of these fields will be present. Personalized installations contain...

marketplace:read
databricks_consumer_installations_createWRITE

Install payload associated with a Databricks Marketplace listing.

marketplace:write
databricks_consumer_installations_deleteWRITE

DESTRUCTIVE - Uninstall an installation associated with a Databricks Marketplace listing.

marketplace:write
databricks_consumer_installations_listREAD

List all installations across all listings.

marketplace:read
databricks_consumer_installations_list_listing_installationsREAD

List all installations for a particular listing.

marketplace:read
databricks_consumer_installations_updateWRITE

This is a update API that will update the part of the fields defined in the installation table as well as interact with external services according to the fields not included in the installation table 1. the token will be rotate if the rotateToken flag is...

marketplace:write
databricks_consumer_listings_batch_getREAD

Batch get a published listing in the Databricks Marketplace that the consumer has access to.

marketplace:read
databricks_consumer_listings_getREAD

Get a published listing in the Databricks Marketplace that the consumer has access to.

marketplace:read
databricks_consumer_listings_listREAD

List all published listings in the Databricks Marketplace that the consumer has access to.

marketplace:read
databricks_consumer_listings_searchREAD

Search published listings in the Databricks Marketplace that the consumer has access to. This query supports a variety of different search parameters and performs fuzzy matching.

marketplace:read
databricks_consumer_personalization_requests_createWRITE

Create a personalization request for a listing.

marketplace:write
databricks_consumer_personalization_requests_getREAD

Get the personalization request for a listing. Each consumer can make at *most* one personalization request for a listing.

marketplace:read
databricks_consumer_personalization_requests_listREAD

List personalization requests for a consumer across all listings.

marketplace:read
databricks_consumer_providers_batch_getREAD

Batch get a provider in the Databricks Marketplace with at least one visible listing.

marketplace:read
databricks_consumer_providers_getREAD

Get a provider in the Databricks Marketplace with at least one visible listing.

marketplace:read
databricks_consumer_providers_listREAD

List all providers in the Databricks Marketplace with at least one visible listing.

marketplace:read
databricks_credentials_create_credentialWRITE

Creates a new credential. The type of credential to be created is determined by the **purpose** field, which should be either **SERVICE** or **STORAGE**. The caller must be a metastore admin or have the metastore privilege **CREATE_STORAGE_CREDENTIAL** for...

catalog:write
databricks_credentials_delete_credentialWRITE

DESTRUCTIVE - Deletes a service or storage credential from the metastore. The caller must be an owner of the credential.

catalog:write
databricks_credentials_generate_temporary_service_credentialWRITE

Returns a set of temporary credentials generated using the specified service credential. The caller must be a metastore admin or have the metastore privilege **ACCESS** on the service credential.

catalog:write
databricks_credentials_get_credentialREAD

Gets a service or storage credential from the metastore. The caller must be a metastore admin, the owner of the credential, or have any permission on the credential.

catalog:read
databricks_credentials_list_credentialsREAD

Gets an array of credentials (as **CredentialInfo** objects). The array is limited to only the credentials that the caller has permission to access. If the caller is a metastore admin, retrieval of credentials is unrestricted. There is no guarantee of a...

catalog:read
databricks_credentials_manager_exchange_tokenWRITE

Exchange tokens with an Identity Provider to get a new access token. It allows specifying scopes to determine token permissions. POST /exchange-tokens/token is the documented public form, expressed via ``google.api.http`` below. GET...

settings:write
databricks_credentials_update_credentialWRITE

Updates a service or storage credential on the metastore. The caller must be the owner of the credential or a metastore admin or have the ``MANAGE`` permission. If the caller is a metastore admin, only the **owner** field can be changed.

catalog:write
databricks_credentials_validate_credentialWRITE

Validates a credential. For service credentials (purpose is **SERVICE**), either the **credential_name** or the cloud-specific credential must be provided. For storage credentials (purpose is **STORAGE**), at least one of **external_location_name** and...

catalog:write
databricks_current_user_meREAD

Get details about the current method caller's identity.

iam:read
databricks_dashboard_email_subscriptions_deleteWRITE

DESTRUCTIVE - Reverts the Dashboard Email Subscriptions setting to its default value.

settings:write
databricks_dashboard_email_subscriptions_getREAD

Gets the Dashboard Email Subscriptions setting.

settings:read
databricks_dashboard_email_subscriptions_updateWRITE

Updates the Dashboard Email Subscriptions setting.

settings:write
databricks_dashboard_widgets_createWRITE

Adds a widget to a dashboard. POST /api/2.0/preview/sql/widgets on Databricks. Requires dashboard_id, options, width.

sql:write
databricks_dashboard_widgets_deleteWRITE

DESTRUCTIVE - Removes a widget from a dashboard

sql:write
databricks_dashboard_widgets_updateWRITE

Updates an existing widget. POST /api/2.0/preview/sql/widgets/{id} on Databricks. Requires id, dashboard_id, options, width.

sql:write
databricks_dashboards_deleteWRITE

DESTRUCTIVE - Moves a dashboard to the trash. Trashed dashboards do not appear in list views or searches, and cannot be shared. **Warning**: This API is deprecated. Please use the AI/BI Dashboards API instead. `Learn more `__

sql:write
databricks_dashboards_getREAD

Returns a JSON representation of a dashboard object, including its visualization and query objects. **Warning**: This API is deprecated. Please use the AI/BI Dashboards API instead. `Learn more `__

sql:read
databricks_dashboards_listREAD

Fetch a paginated list of dashboard objects. **Warning**: Calling this API concurrently 10 or more times could result in throttling, service degradation, or a temporary ban. **Warning**: This API is deprecated. Please use the AI/BI Dashboards API instead...

sql:read
databricks_dashboards_restoreWRITE

A restored dashboard appears in list views and searches and can be shared. **Warning**: This API is deprecated. Please use the AI/BI Dashboards API instead. `Learn more `__

sql:write
databricks_dashboards_updateWRITE

Modify this dashboard definition. This operation only affects attributes of the dashboard object. It does not add, modify, or remove widgets. **Note**: You cannot undo this operation. **Warning**: This API is deprecated. Please use the AI/BI Dashboards API...

sql:write
databricks_data_classification_create_catalog_configWRITE

Create Data Classification configuration for a catalog. Creates a new config resource, which enables Data Classification for the specified catalog. - The config must not already exist for the catalog.

catalog:write
databricks_data_classification_delete_catalog_configWRITE

DESTRUCTIVE - Delete Data Classification configuration for a catalog.

catalog:write
databricks_data_classification_get_catalog_configREAD

Get the Data Classification configuration for a catalog.

catalog:read
databricks_data_classification_update_catalog_configWRITE

Update the Data Classification configuration for a catalog. - The config must already exist for the catalog. - Updates fields specified in the update_mask. Use update_mask field to perform partial updates of the configuration.

catalog:write
databricks_data_quality_cancel_refreshWRITE

DESTRUCTIVE - Cancels a data quality monitor refresh. Currently only supported for the ``table`` ``object_type``. The call must be made in the same workspace as where the monitor was created. The caller must have either of the following sets of permissions...

catalog:write
databricks_data_quality_create_monitorWRITE

Create a data quality monitor on a Unity Catalog object. The caller must provide either ``anomaly_detection_config`` for a schema monitor or ``data_profiling_config`` for a table monitor. For the ``table`` ``object_type``, the caller must have either of the...

catalog:write
databricks_data_quality_create_refreshWRITE

Creates a refresh. Currently only supported for the ``table`` ``object_type``. The call must be made in the same workspace as where the monitor was created. The caller must have either of the following sets of permissions: 1. **MANAGE** and **USE_CATALOG**...

catalog:write
databricks_data_quality_delete_monitorWRITE

DESTRUCTIVE - Delete a data quality monitor on Unity Catalog object. For the ``table`` ``object_type``, the caller must have either of the following sets of permissions: **MANAGE** and **USE_CATALOG** on the table's parent catalog. **USE_CATALOG** on the...

catalog:write
databricks_data_quality_delete_refreshWRITE

DESTRUCTIVE - (Unimplemented) Delete a refresh

catalog:write
databricks_data_quality_get_monitorREAD

Read a data quality monitor on a Unity Catalog object. For the ``table`` ``object_type``, the caller must have either of the following sets of permissions: 1. **MANAGE** and **USE_CATALOG** on the table's parent catalog. 2. **USE_CATALOG** on the table's...

catalog:read
databricks_data_quality_get_refreshREAD

Get data quality monitor refresh. The call must be made in the same workspace as where the monitor was created. For the ``table`` ``object_type``, the caller must have either of the following sets of permissions: 1. **MANAGE** and **USE_CATALOG** on the...

catalog:read
databricks_data_quality_list_monitorREAD

(Unimplemented) List data quality monitors.

catalog:read
databricks_data_quality_list_refreshREAD

List data quality monitor refreshes. The call must be made in the same workspace as where the monitor was created. For the ``table`` ``object_type``, the caller must have either of the following sets of permissions: 1. **MANAGE** and **USE_CATALOG** on the...

catalog:read
databricks_data_quality_update_monitorWRITE

Update a data quality monitor on Unity Catalog object. For the ``table`` ``object_type``, the caller must have either of the following sets of permissions: 1. **MANAGE** and **USE_CATALOG** on the table's parent catalog. 2. **USE_CATALOG** on the table's...

catalog:write
databricks_data_quality_update_refreshWRITE

(Unimplemented) Update a refresh. PATCH /api/data-quality/v1/monitors/{object_type}/{object_id}/refreshes/{refresh_id} on Databricks. Requires object_type, object_id, refresh_id, update_mask.

catalog:write
databricks_data_sources_listREAD

Retrieves a full list of SQL warehouses available in this workspace. All fields that appear in this API response are enumerated for clarity. However, you need only a SQL warehouse's ``id`` to create new queries against it. **Warning**: This API is...

sql:read
databricks_database_create_database_catalogWRITE

Create a Database Catalog. POST /api/2.0/database/catalogs on Databricks.

database:write
databricks_database_create_database_instanceWRITE

Create a Database Instance. POST /api/2.0/database/instances on Databricks.

database:write
databricks_database_create_database_instance_roleWRITE

Create a role for a Database Instance. POST /api/2.0/database/instances/{instance_name}/roles on Databricks. Requires instance_name.

database:write
databricks_database_create_database_tableWRITE

Create a Database Table. Useful for registering pre-existing PG tables in UC. See CreateSyncedDatabaseTable for creating synced tables in PG from a source table in UC.

database:write
databricks_database_create_synced_database_tableWRITE

Create a Synced Database Table. POST /api/2.0/database/synced_tables on Databricks.

database:write
databricks_database_delete_database_catalogWRITE

DESTRUCTIVE - Delete a Database Catalog.

database:write
databricks_database_delete_database_instanceWRITE

DESTRUCTIVE - Delete a Database Instance.

database:write
databricks_database_delete_database_instance_roleWRITE

DESTRUCTIVE - Deletes a role for a Database Instance.

database:write
databricks_database_delete_database_tableWRITE

DESTRUCTIVE — Delete a Database Table. DELETE /api/2.0/database/tables/{name} on Databricks. Requires name.

database:write
databricks_database_delete_synced_database_tableWRITE

DESTRUCTIVE - Delete a Synced Database Table.

database:write
databricks_database_failover_database_instanceWRITE

Failover the primary node of a Database Instance to a secondary.

database:write
databricks_database_find_database_instance_by_uidREAD

Find a Database Instance by uid. GET /api/2.0/database/instances:findByUid on Databricks.

database:read
databricks_database_generate_database_credentialWRITE

Generates a credential that can be used to access database instances.

database:write
databricks_database_get_database_catalogREAD

Get a Database Catalog. GET /api/2.0/database/catalogs/{name} on Databricks. Requires name.

database:read
databricks_database_get_database_instanceREAD

Get a Database Instance. GET /api/2.0/database/instances/{name} on Databricks. Requires name.

database:read
databricks_database_get_database_instance_roleREAD

Gets a role for a Database Instance. GET /api/2.0/database/instances/{instance_name}/roles/{name} on Databricks. Requires instance_name, name.

database:read
databricks_database_get_database_tableREAD

Get a Database Table. GET /api/2.0/database/tables/{name} on Databricks. Requires name.

database:read
databricks_database_get_synced_database_tableREAD

Get a Synced Database Table. GET /api/2.0/database/synced_tables/{name} on Databricks. Requires name.

database:read
databricks_database_list_database_catalogsREAD

This API is currently unimplemented, but exposed for Terraform support.

database:read
databricks_database_list_database_instance_rolesREAD

START OF PG ROLE APIs Section These APIs are marked a PUBLIC with stage < PUBLIC_PREVIEW. With more recent Lakebase V2 plans, we don't plan to ever advance these to PUBLIC_PREVIEW. These APIs will remain effectively undocumented/UI-only and we'll aim for a...

database:read
databricks_database_list_database_instancesREAD

List Database Instances. GET /api/2.0/database/instances on Databricks.

database:read
databricks_database_list_synced_database_tablesREAD

This API is currently unimplemented, but exposed for Terraform support.

database:read
databricks_database_update_database_catalogWRITE

This API is currently unimplemented, but exposed for Terraform support.

database:write
databricks_database_update_database_instanceWRITE

Update a Database Instance. PATCH /api/2.0/database/instances/{name} on Databricks. Requires name, update_mask.

database:write
databricks_database_update_database_instance_roleWRITE

Update a role for a Database Instance. PATCH /api/2.0/database/instances/{instance_name}/roles/{name} on Databricks. Requires instance_name, name.

database:write
databricks_database_update_synced_database_tableWRITE

This API is currently unimplemented, but exposed for Terraform support.

database:write
databricks_database_upgrade_instance_to_autoscalingWRITE

Upgrade a Database Instance to Autoscaling.

database:write
databricks_dbfs_add_blockWRITE

Appends a block of data to the stream specified by the input handle. If the handle does not exist, this call will throw an exception with ``RESOURCE_DOES_NOT_EXIST``. If the block of data exceeds 1 MB, this call will throw an exception with...

files:write
databricks_dbfs_closeWRITE

Closes the stream specified by the input handle. If the handle does not exist, this call throws an exception with ``RESOURCE_DOES_NOT_EXIST``.

files:write
databricks_dbfs_createWRITE

Opens a stream to write to a file and returns a handle to this stream. There is a 10 minute idle timeout on this handle. If a file or directory already exists on the given path and **overwrite** is set to false, this call will throw an exception with...

files:write
databricks_dbfs_deleteWRITE

DESTRUCTIVE - Delete the file or directory (optionally recursively delete all files in the directory). This call throws an exception with ``IO_ERROR`` if the path is a non-empty directory and ``recursive`` is set to ``false`` or on other similar errors. When...

files:write
databricks_dbfs_get_statusREAD

Gets the file information for a file or directory. If the file or directory does not exist, this call throws an exception with ``RESOURCE_DOES_NOT_EXIST``.

files:read
databricks_dbfs_listREAD

List the contents of a directory, or details of the file. If the file or directory does not exist, this call throws an exception with ``RESOURCE_DOES_NOT_EXIST``. When calling list on a large directory, the list operation will time out after approximately...

files:read
databricks_dbfs_mkdirsWRITE

Creates the given directory and necessary parent directories if they do not exist. If a file (not a directory) exists at any prefix of the input path, this call throws an exception with ``RESOURCE_ALREADY_EXISTS``. **Note**: If this operation fails, it...

files:write
databricks_dbfs_moveWRITE

Moves a file from one location to another location within DBFS. If the source file does not exist, this call throws an exception with ``RESOURCE_DOES_NOT_EXIST``. If a file already exists in the destination path, this call throws an exception with...

files:write
databricks_dbfs_putWRITE

Uploads a file through the use of multipart form post. It is mainly used for streaming uploads, but can also be used as a convenient single call for data upload. Alternatively you can pass contents as base64 string. The amount of data that can be passed...

files:write
databricks_dbfs_readREAD

Returns the contents of a file. If the file does not exist, this call throws an exception with ``RESOURCE_DOES_NOT_EXIST``. If the path is a directory, the read length is negative, or if the offset is negative, this call throws an exception with...

files:read
databricks_default_namespace_deleteWRITE

DESTRUCTIVE - Deletes the default namespace setting for the workspace. A fresh etag needs to be provided in ``DELETE`` requests (as a query parameter). The etag can be retrieved by making a ``GET`` request before the ``DELETE`` request. If the setting is...

settings:write
databricks_default_namespace_getREAD

Gets the default namespace setting. GET /api/2.0/settings/types/default_namespace_ws/names/default on Databricks.

settings:read
databricks_default_namespace_updateWRITE

Updates the default namespace setting for the workspace. A fresh etag needs to be provided in ``PATCH`` requests (as part of the setting field). The etag can be retrieved by making a ``GET`` request before the ``PATCH`` request. Note that if the setting...

settings:write
databricks_default_warehouse_id_deleteWRITE

DESTRUCTIVE - Reverts the Default Warehouse Id setting to its default value.

settings:write
databricks_default_warehouse_id_getREAD

Gets the Default Warehouse Id setting. GET /api/2.0/settings/types/default_warehouse_id/names/default on Databricks.

settings:read
databricks_default_warehouse_id_updateWRITE

Updates the Default Warehouse Id setting.

settings:write
databricks_disable_legacy_access_deleteWRITE

DESTRUCTIVE - Deletes legacy access disablement status.

settings:write
databricks_disable_legacy_access_getREAD

Retrieves legacy access disablement Status.

settings:read
databricks_disable_legacy_access_updateWRITE

Updates legacy access disablement status.

settings:write
databricks_disable_legacy_dbfs_deleteWRITE

DESTRUCTIVE - Deletes the disable legacy DBFS setting for a workspace, reverting back to the default.

settings:write
databricks_disable_legacy_dbfs_getREAD

Gets the disable legacy DBFS setting. GET /api/2.0/settings/types/disable_legacy_dbfs/names/default on Databricks.

settings:read
databricks_disable_legacy_dbfs_updateWRITE

Updates the disable legacy DBFS setting for the workspace.

settings:write
databricks_disaster_recovery_create_failover_groupWRITE

Create a new failover group. POST /api/disaster-recovery/v1/{parent}/failover-groups on Databricks. Requires parent, failover_group_id.

account:write
databricks_disaster_recovery_create_stable_urlWRITE

Create a new stable URL. POST /api/disaster-recovery/v1/{parent}/stable-urls on Databricks. Requires parent, stable_url_id.

account:write
databricks_disaster_recovery_delete_failover_groupWRITE

DESTRUCTIVE — Delete a failover group. DELETE /api/disaster-recovery/v1/{name} on Databricks. Requires name.

account:write
databricks_disaster_recovery_delete_stable_urlWRITE

DESTRUCTIVE — Delete a stable URL. DELETE /api/disaster-recovery/v1/{name} on Databricks. Requires name.

account:write
databricks_disaster_recovery_failover_failover_groupWRITE

Initiate a failover to a new primary region.

account:write
databricks_disaster_recovery_get_failover_groupREAD

Get a failover group. GET /api/disaster-recovery/v1/{name} on Databricks. Requires name.

account:read
databricks_disaster_recovery_get_stable_urlREAD

Get a stable URL. GET /api/disaster-recovery/v1/{name} on Databricks. Requires name.

account:read
databricks_disaster_recovery_list_failover_groupsREAD

List failover groups. List entries are abbreviated: ``state`` and ``replication_point`` are not populated. Call GetFailoverGroup to retrieve the full resource.

account:read
databricks_disaster_recovery_list_stable_urlsREAD

List stable URLs for an account. GET /api/disaster-recovery/v1/{parent}/stable-urls on Databricks. Requires parent.

account:read
databricks_disaster_recovery_update_failover_groupWRITE

Update a failover group. PATCH /api/disaster-recovery/v1/{name} on Databricks. Requires name, update_mask.

account:write
databricks_enable_export_notebook_get_enable_export_notebookREAD

Gets the Notebook and File exporting setting.

settings:read
databricks_enable_export_notebook_patch_enable_export_notebookWRITE

Updates the Notebook and File exporting setting. The model follows eventual consistency, which means the get after the update operation might receive stale values for some time.

settings:write
databricks_enable_notebook_table_clipboard_get_enable_notebook_table_clipboardREAD

Gets the Results Table Clipboard features setting.

settings:read
databricks_enable_notebook_table_clipboard_patch_enable_notebook_table_clipboardWRITE

Updates the Results Table Clipboard features setting. The model follows eventual consistency, which means the get after the update operation might receive stale values for some time.

settings:write
databricks_enable_results_downloading_get_enable_results_downloadingREAD

Gets the Notebook results download setting.

settings:read
databricks_enable_results_downloading_patch_enable_results_downloadingWRITE

Updates the Notebook results download setting. The model follows eventual consistency, which means the get after the update operation might receive stale values for some time.

settings:write
databricks_endpoints_create_endpointWRITE

Creates a new network connectivity endpoint that enables private connectivity between your network resources and Databricks services. After creation, the endpoint is initially in the PENDING state. The Databricks endpoint service automatically reviews and...

compute:write
databricks_endpoints_delete_endpointWRITE

DESTRUCTIVE - Deletes a network endpoint. This will remove the endpoint configuration from Databricks. Depending on the endpoint type and use case, you may also need to delete corresponding network resources in your cloud provider account.

compute:write
databricks_endpoints_get_endpointREAD

Gets details of a specific network endpoint.

compute:read
databricks_endpoints_list_endpointsREAD

Lists all network connectivity endpoints for the account.

compute:read
databricks_enhanced_security_monitoring_getREAD

Gets the enhanced security monitoring setting.

settings:read
databricks_enhanced_security_monitoring_updateWRITE

Updates the enhanced security monitoring setting for the workspace. A fresh etag needs to be provided in ``PATCH`` requests (as part of the setting field). The etag can be retrieved by making a ``GET`` request before the ``PATCH`` request. If the setting is...

settings:write
databricks_entity_tag_assignments_createWRITE

Creates a tag assignment for an Unity Catalog entity. To add tags to Unity Catalog entities, you must own the entity or have the following privileges: - **APPLY TAG** on the entity - **USE SCHEMA** on the entity's parent schema - **USE CATALOG** on the...

catalog:write
databricks_entity_tag_assignments_deleteWRITE

DESTRUCTIVE - Deletes a tag assignment for an Unity Catalog entity by its key. To delete tags from Unity Catalog entities, you must own the entity or have the following privileges: - **APPLY TAG** on the entity - **USE_SCHEMA** on the entity's parent schema...

catalog:write
databricks_entity_tag_assignments_getREAD

Gets a tag assignment for an Unity Catalog entity by tag key.

catalog:read
databricks_entity_tag_assignments_listREAD

List tag assignments for an Unity Catalog entity PAGINATION BEHAVIOR: The API is by default paginated, a page may contain zero results while still providing a next_page_token. Clients must continue reading pages until next_page_token is absent, which is the...

catalog:read
databricks_entity_tag_assignments_updateWRITE

Updates an existing tag assignment for an Unity Catalog entity. To update tags to Unity Catalog entities, you must own the entity or have the following privileges: - **APPLY TAG** on the entity - **USE SCHEMA** on the entity's parent schema - **USE...

catalog:write
databricks_environments_batch_get_workspace_base_environmentsREAD

Retrieves multiple WorkspaceBaseEnvironments by name in a single call. The operation is atomic: it either returns all of the requested environments or fails.

compute:read
databricks_environments_create_workspace_base_environmentWRITE

Creates a new WorkspaceBaseEnvironment. This is a long-running operation. The operation will asynchronously generate a materialized environment to optimize dependency resolution and is only marked as done when the materialized environment has been...

compute:write
databricks_environments_delete_workspace_base_environmentWRITE

DESTRUCTIVE - Deletes a WorkspaceBaseEnvironment. Deleting a base environment may impact linked notebooks and jobs. This operation is irreversible and should be performed only when you are certain the environment is no longer needed.

compute:write
databricks_environments_get_default_workspace_base_environmentREAD

Gets the default WorkspaceBaseEnvironment configuration for the workspace. Returns the current default base environment settings for both CPU and GPU compute.

compute:read
databricks_environments_get_operationREAD

Gets the status of a long-running operation. Clients can use this method to poll the operation result.

compute:read
databricks_environments_get_workspace_base_environmentREAD

Retrieves a WorkspaceBaseEnvironment by its name.

compute:read
databricks_environments_list_workspace_base_environmentsREAD

Lists all WorkspaceBaseEnvironments in the workspace. Databricks provides the following base environments: - ``workspace-base-environments/databricks_ai_...``: includes popular AI and deep learning packages for serverless GPU compute. -...

compute:read
databricks_environments_refresh_workspace_base_environmentWRITE

Refreshes the materialized environment for a WorkspaceBaseEnvironment. This is a long-running operation. The operation will asynchronously regenerate the materialized environment and is only marked as done when the materialized environment has been...

compute:write
databricks_environments_update_default_workspace_base_environmentWRITE

Updates the default WorkspaceBaseEnvironment configuration for the workspace. Sets the specified base environments as the workspace defaults for CPU and/or GPU compute.

compute:write
databricks_environments_update_workspace_base_environmentWRITE

Updates an existing WorkspaceBaseEnvironment. This is a long-running operation. The operation will asynchronously regenerate the materialized environment and is only marked as done when the materialized environment has been successfully generated or has...

compute:write
databricks_experiments_create_experimentWRITE

Creates an experiment with a name. Returns the ID of the newly created experiment. Validates that another experiment with the same name does not already exist and fails if another experiment with the same name already exists. Throws...

ml:write
databricks_experiments_create_logged_modelWRITE

Create a logged model. POST /api/2.0/mlflow/logged-models on Databricks. Requires experiment_id.

ml:write
databricks_experiments_create_runWRITE

Creates a new run within an experiment. A run is usually a single execution of a machine learning or data ETL pipeline. MLflow uses runs to track the ``mlflowParam``, ``mlflowMetric``, and ``mlflowRunTag`` associated with a single execution.

ml:write
databricks_experiments_delete_experimentWRITE

DESTRUCTIVE - Marks an experiment and associated metadata, runs, metrics, params, and tags for deletion. If the experiment uses FileStore, artifacts associated with the experiment are also deleted.

ml:write
databricks_experiments_delete_logged_modelWRITE

DESTRUCTIVE — Delete a logged model. DELETE /api/2.0/mlflow/logged-models/{model_id} on Databricks. Requires model_id.

ml:write
databricks_experiments_delete_logged_model_tagWRITE

DESTRUCTIVE - Delete a tag on a logged model.

ml:write
databricks_experiments_delete_runWRITE

DESTRUCTIVE — Marks a run for deletion. POST /api/2.0/mlflow/runs/delete on Databricks. Requires run_id.

ml:write
databricks_experiments_delete_runsWRITE

DESTRUCTIVE - Bulk delete runs in an experiment that were created prior to or at the specified timestamp. Deletes at most max_runs per request. To call this API from a Databricks Notebook in Python, you can use the client code snippet on

ml:write
databricks_experiments_delete_tagWRITE

DESTRUCTIVE - Deletes a tag on a run. Tags are run metadata that can be updated during a run and after a run completes.

ml:write
databricks_experiments_finalize_logged_modelWRITE

Finalize a logged model. PATCH /api/2.0/mlflow/logged-models/{model_id} on Databricks. Requires model_id, status.

ml:write
databricks_experiments_get_by_nameREAD

Gets metadata for an experiment. This endpoint will return deleted experiments, but prefers the active experiment if an active and deleted experiment share the same name. If multiple deleted experiments share the same name, the API will return one of them...

ml:read
databricks_experiments_get_experimentREAD

Gets metadata for an experiment. This method works on deleted experiments.

ml:read
databricks_experiments_get_historyREAD

Gets a list of all values for the specified metric for a given run.

ml:read
databricks_experiments_get_logged_modelREAD

Get a logged model. GET /api/2.0/mlflow/logged-models/{model_id} on Databricks. Requires model_id.

ml:read
databricks_experiments_get_logged_modelsREAD

Batch endpoint for getting logged models from a list of model IDs

ml:read
databricks_experiments_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

ml:read
databricks_experiments_get_permissionsREAD

Gets the permissions of an experiment. Experiments can inherit permissions from their root object.

ml:read
databricks_experiments_get_runREAD

Gets the metadata, metrics, params, and tags for a run. In the case where multiple metrics with the same key are logged for a run, return only the value with the latest timestamp. If there are multiple values with the latest timestamp, return the maximum of...

ml:read
databricks_experiments_list_artifactsREAD

List artifacts for a run. Takes an optional ``artifact_path`` prefix which if specified, the response contains only artifacts with the specified prefix. A maximum of 1000 artifacts will be retrieved for UC Volumes. Please call...

ml:read
databricks_experiments_list_experimentsREAD

Gets a list of all experiments. GET /api/2.0/mlflow/experiments/list on Databricks.

ml:read
databricks_experiments_log_batchWRITE

Logs a batch of metrics, params, and tags for a run. If any data failed to be persisted, the server will respond with an error (non-200 status code). In case of error (due to internal server error or an invalid request), partial data may be written. You can...

ml:write
databricks_experiments_log_inputsWRITE

Logs inputs, such as datasets and models, to an MLflow Run.

ml:write
databricks_experiments_log_logged_model_paramsWRITE

Logs params for a logged model. A param is a key-value pair (string key, string value). Examples include hyperparameters used for ML model training. A param can be logged only once for a logged model, and attempting to overwrite an existing param with a...

ml:write
databricks_experiments_log_metricWRITE

Log a metric for a run. A metric is a key-value pair (string key, float value) with an associated timestamp. Examples include the various metrics that represent ML model accuracy. A metric can be logged multiple times.

ml:write
databricks_experiments_log_modelWRITE

**Note:** the [Create a logged model](/api/workspace/experiments/createloggedmodel) API replaces this endpoint. Log a model to an MLflow Run.

ml:write
databricks_experiments_log_outputsWRITE

Logs outputs, such as models, from an MLflow Run.

ml:write
databricks_experiments_log_paramWRITE

Logs a param used for a run. A param is a key-value pair (string key, string value). Examples include hyperparameters used for ML model training and constant dates and values used in an ETL pipeline. A param can be logged only once for a run.

ml:write
databricks_experiments_restore_experimentWRITE

Restore an experiment marked for deletion. This also restores associated metadata, runs, metrics, params, and tags. If experiment uses FileStore, underlying artifacts associated with experiment are also restored. Throws ``RESOURCE_DOES_NOT_EXIST`` if...

ml:write
databricks_experiments_restore_runWRITE

Restores a deleted run. This also restores associated metadata, runs, metrics, params, and tags. Throws ``RESOURCE_DOES_NOT_EXIST`` if the run was never created or was permanently deleted.

ml:write
databricks_experiments_restore_runsWRITE

Bulk restore runs in an experiment that were deleted no earlier than the specified timestamp. Restores at most max_runs per request. To call this API from a Databricks Notebook in Python, you can use the client code snippet on

ml:write
databricks_experiments_search_experimentsWRITE

Searches for experiments that satisfy specified search criteria.

ml:write
databricks_experiments_search_logged_modelsWRITE

Search for Logged Models that satisfy specified search criteria.

ml:write
databricks_experiments_search_runsWRITE

Searches for runs that satisfy expressions. Search expressions can use ``mlflowMetric`` and ``mlflowParam`` keys.

ml:write
databricks_experiments_set_experiment_tagWRITE

Sets a tag on an experiment. Experiment tags are metadata that can be updated.

ml:write
databricks_experiments_set_logged_model_tagsWRITE

Set tags for a logged model. PATCH /api/2.0/mlflow/logged-models/{model_id}/tags on Databricks. Requires model_id.

ml:write
databricks_experiments_set_tagWRITE

Sets a tag on a run. Tags are run metadata that can be updated during a run and after a run completes.

ml:write
databricks_experiments_update_experimentWRITE

Updates experiment metadata. POST /api/2.0/mlflow/experiments/update on Databricks. Requires experiment_id.

ml:write
databricks_experiments_update_runWRITE

Updates run metadata. POST /api/2.0/mlflow/runs/update on Databricks.

ml:write
databricks_external_lineage_create_external_lineage_relationshipWRITE

Creates an external lineage relationship between a Databricks or external metadata object and another external metadata object.

catalog:write
databricks_external_lineage_delete_external_lineage_relationshipWRITE

DESTRUCTIVE - Deletes an external lineage relationship between a Databricks or external metadata object and another external metadata object.

catalog:write
databricks_external_lineage_list_external_lineage_relationshipsREAD

Lists external lineage relationships of a Databricks object or external metadata given a supplied direction.

catalog:read
databricks_external_lineage_update_external_lineage_relationshipWRITE

Updates an external lineage relationship between a Databricks or external metadata object and another external metadata object.

catalog:write
databricks_external_locations_createWRITE

Creates a new external location entry in the metastore. The caller must be a metastore admin or have the **CREATE_EXTERNAL_LOCATION** privilege on both the metastore and the associated storage credential.

catalog:write
databricks_external_locations_deleteWRITE

DESTRUCTIVE - Deletes the specified external location from the metastore. The caller must be the owner of the external location.

catalog:write
databricks_external_locations_getREAD

Gets an external location from the metastore. The caller must be either a metastore admin, the owner of the external location, or a user that has some privilege on the external location.

catalog:read
databricks_external_locations_listREAD

Gets an array of external locations (**ExternalLocationInfo** objects) from the metastore. The caller must be a metastore admin, the owner of the external location, or a user that has some privilege on the external location. There is no guarantee of a...

catalog:read
databricks_external_locations_updateWRITE

Updates an external location in the metastore. The caller must be the owner of the external location, or be a metastore admin. In the second case, the admin can only update the name of the external location.

catalog:write
databricks_external_metadata_create_external_metadataWRITE

Creates a new external metadata object in the parent metastore if the caller is a metastore admin or has the **CREATE_EXTERNAL_METADATA** privilege. Grants **BROWSE** to all account users upon creation by default.

catalog:write
databricks_external_metadata_delete_external_metadataWRITE

DESTRUCTIVE - Deletes the external metadata object that matches the supplied name. The caller must be a metastore admin, the owner of the external metadata object, or a user that has the **MANAGE** privilege.

catalog:write
databricks_external_metadata_get_external_metadataREAD

Gets the specified external metadata object in a metastore. The caller must be a metastore admin, the owner of the external metadata object, or a user that has the **BROWSE** privilege.

catalog:read
databricks_external_metadata_list_external_metadataREAD

Gets an array of external metadata objects in the metastore. If the caller is the metastore admin, all external metadata objects will be retrieved. Otherwise, only external metadata objects that the caller has **BROWSE** on will be retrieved. There is no...

catalog:read
databricks_external_metadata_update_external_metadataWRITE

Updates the external metadata object that matches the supplied name. The caller can only update either the owner or other metadata fields in one request. The caller must be a metastore admin, the owner of the external metadata object, or a user that has the...

catalog:write
databricks_feature_engineering_batch_create_materialized_featuresWRITE

Batch create materialized features. POST /api/2.0/feature-engineering/materialized-features:batchCreate on Databricks. Requires requests.

ml:write
databricks_feature_engineering_create_featureWRITE

Create a Feature. POST /api/2.0/feature-engineering/features on Databricks.

ml:write
databricks_feature_engineering_create_kafka_configWRITE

Create a Kafka config. During PrPr, Kafka configs can be read and used when creating features under the entire metastore. Only the creator of the Kafka config can delete it.

ml:write
databricks_feature_engineering_create_materialized_featureWRITE

Create a materialized feature. POST /api/2.0/feature-engineering/materialized-features on Databricks.

ml:write
databricks_feature_engineering_create_streamWRITE

Create a Stream, a governed UC entity representing an external streaming data source.

ml:write
databricks_feature_engineering_delete_featureWRITE

DESTRUCTIVE — Delete a Feature. DELETE /api/2.0/feature-engineering/features/{full_name} on Databricks. Requires full_name.

ml:write
databricks_feature_engineering_delete_kafka_configWRITE

DESTRUCTIVE - Delete a Kafka config. During PrPr, Kafka configs can be read and used when creating features under the entire metastore. Only the creator of the Kafka config can delete it.

ml:write
databricks_feature_engineering_delete_materialized_featureWRITE

DESTRUCTIVE - Delete a materialized feature.

ml:write
databricks_feature_engineering_delete_streamWRITE

DESTRUCTIVE - Delete a Stream by its full three-part name (catalog.schema.stream).

ml:write
databricks_feature_engineering_get_featureREAD

Get a Feature. GET /api/2.0/feature-engineering/features/{full_name} on Databricks. Requires full_name.

ml:read
databricks_feature_engineering_get_kafka_configREAD

Get a Kafka config. During PrPr, Kafka configs can be read and used when creating features under the entire metastore. Only the creator of the Kafka config can delete it.

ml:read
databricks_feature_engineering_get_materialized_featureREAD

Get a materialized feature. GET /api/2.0/feature-engineering/materialized-features/{materialized_feature_id} on Databricks. Requires materialized_feature_id.

ml:read
databricks_feature_engineering_get_streamREAD

Get a Stream by its full three-part name (catalog.schema.stream).

ml:read
databricks_feature_engineering_list_featuresREAD

List Features. GET /api/2.0/feature-engineering/features on Databricks. Requires catalog_name, schema_name.

ml:read
databricks_feature_engineering_list_kafka_configsREAD

List Kafka configs. During PrPr, Kafka configs can be read and used when creating features under the entire metastore. Only the creator of the Kafka config can delete it.

ml:read
databricks_feature_engineering_list_materialized_featuresREAD

List materialized features. GET /api/2.0/feature-engineering/materialized-features on Databricks.

ml:read
databricks_feature_engineering_list_streamsREAD

List Streams under a given catalog.schema parent.

ml:read
databricks_feature_engineering_update_featureWRITE

Update a Feature. PATCH /api/2.0/feature-engineering/features/{full_name} on Databricks. Requires full_name, update_mask.

ml:write
databricks_feature_engineering_update_kafka_configWRITE

Update a Kafka config. During PrPr, Kafka configs can be read and used when creating features under the entire metastore. Only the creator of the Kafka config can delete it.

ml:write
databricks_feature_engineering_update_materialized_featureWRITE

Update a materialized feature (pause/resume).

ml:write
databricks_feature_engineering_update_streamWRITE

Update a Stream. Only fields listed in ``update_mask`` are mutated.

ml:write
databricks_feature_store_create_online_storeWRITE

Create an Online Feature Store. POST /api/2.0/feature-store/online-stores on Databricks.

ml:write
databricks_feature_store_delete_online_storeWRITE

DESTRUCTIVE - Delete an Online Feature Store.

ml:write
databricks_feature_store_delete_online_tableWRITE

DESTRUCTIVE — Delete online table. DELETE /api/2.0/feature-store/online-tables/{online_table_name} on Databricks. Requires online_table_name.

ml:write
databricks_feature_store_get_online_storeREAD

Get an Online Feature Store. GET /api/2.0/feature-store/online-stores/{name} on Databricks. Requires name.

ml:read
databricks_feature_store_list_online_storesREAD

List Online Feature Stores. GET /api/2.0/feature-store/online-stores on Databricks.

ml:read
databricks_feature_store_publish_tableWRITE

Publish features. POST /api/2.0/feature-store/tables/{source_table_name}/publish on Databricks. Requires source_table_name, publish_spec.

ml:write
databricks_feature_store_update_online_storeWRITE

Update an Online Feature Store. PATCH /api/2.0/feature-store/online-stores/{name} on Databricks. Requires name, update_mask.

ml:write
databricks_forecasting_create_experimentWRITE

Creates a serverless forecasting experiment. Returns the experiment ID.

ml:write
databricks_forecasting_get_experimentREAD

Public RPC to get forecasting experiment

ml:read
databricks_functions_createWRITE

**WARNING: This API is experimental and will change in future versions** Creates a new function The user must have the following permissions in order for the function to be created: - **USE_CATALOG** on the function's parent catalog - **USE_SCHEMA** and...

catalog:write
databricks_functions_deleteWRITE

DESTRUCTIVE - Deletes the function that matches the supplied name. For the deletion to succeed, the user must satisfy one of the following conditions: - Is the owner of the function's parent catalog - Is the owner of the function's parent schema and have...

catalog:write
databricks_functions_getREAD

Gets a function from within a parent catalog and schema. For the fetch to succeed, the user must satisfy one of the following requirements: - Is a metastore admin - Is an owner of the function's parent catalog - Have the **USE_CATALOG** privilege on the...

catalog:read
databricks_functions_listREAD

List functions within the specified parent catalog and schema. If the user is a metastore admin, all functions are returned in the output list. Otherwise, the user must have the **USE_CATALOG** privilege on the catalog and the **USE_SCHEMA** privilege on...

catalog:read
databricks_functions_updateWRITE

Updates the function that matches the supplied name. Only the owner of the function can be updated. If the user is not a metastore admin, the user must be a member of the group that is the new function owner. - Is a metastore admin - Is the owner of the...

catalog:write
databricks_genie_create_messageWRITE

Create new message in a [conversation](:method:genie/startconversation). The AI response uses all previously created messages in the conversation to respond.

sql:write
databricks_genie_create_message_commentWRITE

Create a comment on a conversation message.

sql:write
databricks_genie_create_spaceWRITE

Creates a Genie space from a serialized payload.

sql:write
databricks_genie_delete_conversationWRITE

DESTRUCTIVE — Delete a conversation. DELETE /api/2.0/genie/spaces/{space_id}/conversations/{conversation_id} on Databricks. Requires space_id, conversation_id.

sql:write
databricks_genie_delete_conversation_messageWRITE

DESTRUCTIVE - Delete a conversation message.

sql:write
databricks_genie_download_message_attachment_visualizationREAD

Download a rendered image of a message visualization attachment. The response body is the raw PNG image, not a JSON payload. This is only available if the attachment is a visualization and the message status is ``COMPLETED``. This endpoint is not supported...

sql:read
databricks_genie_execute_message_attachment_queryWRITE

Execute the SQL for a message query attachment. Use this API when the query attachment has expired and needs to be re-executed.

sql:write
databricks_genie_execute_message_queryWRITE

DEPRECATED: Use [Execute Message Attachment Query](:method:genie/executemessageattachmentquery) instead.

sql:write
databricks_genie_generate_download_full_query_resultWRITE

Initiates a new SQL execution and returns a ``download_id`` and ``download_id_signature`` that you can use to track the progress of the download. The query result is stored in an external link and can be retrieved using the [Get Download Full Query...

sql:write
databricks_genie_genie_create_eval_runWRITE

Create and run evaluations for multiple benchmark questions in a Genie space.

sql:write
databricks_genie_genie_get_eval_result_detailsREAD

Get details for evaluation results. GET /api/2.0/genie/spaces/{space_id}/eval-runs/{eval_run_id}/results/{result_id} on Databricks. Requires space_id, eval_run_id, result_id.

sql:read
databricks_genie_genie_get_eval_runREAD

Get evaluation run details. GET /api/2.0/genie/spaces/{space_id}/eval-runs/{eval_run_id} on Databricks. Requires space_id, eval_run_id.

sql:read
databricks_genie_genie_list_eval_resultsREAD

List evaluation results for a specific evaluation run.

sql:read
databricks_genie_genie_list_eval_runsREAD

Lists all evaluation runs in a space. GET /api/2.0/genie/spaces/{space_id}/eval-runs on Databricks. Requires space_id.

sql:read
databricks_genie_get_download_full_query_resultREAD

After [Generating a Full Query Result Download](:method:genie/generatedownloadfullqueryresult) and successfully receiving a ``download_id`` and ``download_id_signature``, use this API to poll the download progress. Both ``download_id`` and...

sql:read
databricks_genie_get_messageREAD

Get message from conversation. GET /api/2.0/genie/spaces/{space_id}/conversations/{conversation_id}/messages/{message_id} on Databricks. Requires space_id, conversation_id, message_id.

sql:read
databricks_genie_get_message_attachment_query_resultREAD

Get the result of SQL query if the message has a query attachment. This is only available if a message has a query attachment and the message status is ``EXECUTING_QUERY`` OR ``COMPLETED``.

sql:read
databricks_genie_get_message_query_resultREAD

DEPRECATED: Use [Get Message Attachment Query Result](:method:genie/getmessageattachmentqueryresult) instead.

sql:read
databricks_genie_get_message_query_result_by_attachmentREAD

DEPRECATED: Use [Get Message Attachment Query Result](:method:genie/getmessageattachmentqueryresult) instead.

sql:read
databricks_genie_get_spaceREAD

Get details of a Genie Space. GET /api/2.0/genie/spaces/{space_id} on Databricks. Requires space_id.

sql:read
databricks_genie_list_conversation_commentsREAD

List all comments across all messages in a conversation.

sql:read
databricks_genie_list_conversation_messagesREAD

List messages in a conversation. GET /api/2.0/genie/spaces/{space_id}/conversations/{conversation_id}/messages on Databricks. Requires space_id, conversation_id.

sql:read
databricks_genie_list_conversationsREAD

Get a list of conversations in a Genie Space.

sql:read
databricks_genie_list_message_commentsREAD

List comments on a specific conversation message.

sql:read
databricks_genie_list_spacesREAD

Get list of Genie Spaces. GET /api/2.0/genie/spaces on Databricks.

sql:read
databricks_genie_send_message_feedbackWRITE

Send feedback for a message. POST /api/2.0/genie/spaces/{space_id}/conversations/{conversation_id}/messages/{message_id}/feedback on Databricks. Requires space_id, conversation_id, message_id, rating.

sql:write
databricks_genie_start_conversationWRITE

Start a new conversation. POST /api/2.0/genie/spaces/{space_id}/start-conversation on Databricks. Requires space_id, content.

sql:write
databricks_genie_trash_spaceWRITE

DESTRUCTIVE - Move a Genie Space to the trash.

sql:write
databricks_genie_update_spaceWRITE

Updates a Genie space with a serialized payload.

sql:write
databricks_git_credentials_deleteWRITE

DESTRUCTIVE - Deletes the specified Git credential.

workspace:write
databricks_git_credentials_getREAD

Gets the Git credential with the specified credential ID.

workspace:read
databricks_git_credentials_listREAD

Lists the calling user's Git credentials.

workspace:read
databricks_global_init_scripts_createWRITE

Creates a new global init script in this workspace.

compute:write
databricks_global_init_scripts_deleteWRITE

DESTRUCTIVE - Deletes a global init script.

compute:write
databricks_global_init_scripts_getREAD

Gets all the details of a script, including its Base64-encoded contents.

compute:read
databricks_global_init_scripts_listREAD

Get a list of all global init scripts for this workspace. This returns all properties for each script but **not** the script contents. To retrieve the contents of a script, use the [get a global init script](:method:globalinitscripts/get) operation.

compute:read
databricks_global_init_scripts_updateWRITE

Updates a global init script, specifying only the fields to change. All fields are optional. Unspecified fields retain their current value.

compute:write
databricks_grants_getREAD

Gets the permissions for a securable. Does not include inherited permissions. NOTE: we recommend using max_results=0 to use the paginated version of this API. Unpaginated calls will be deprecated soon. PAGINATION BEHAVIOR: When using pagination (max_results...

catalog:read
databricks_grants_get_effectiveREAD

Gets the effective permissions for a securable. Includes inherited permissions from any parent securables. NOTE: we recommend using max_results=0 to use the paginated version of this API. Unpaginated calls will be deprecated soon. PAGINATION BEHAVIOR: When...

catalog:read
databricks_grants_listREAD

Lists the privilege assignments for a securable. Does not include inherited privileges. Paginated version of Get Permissions API.

catalog:read
databricks_grants_list_effectiveREAD

Lists the effective privilege assignments for a securable. Includes inherited privileges. Paginated version of Get Effective Permissions API.

catalog:read
databricks_groups_createWRITE

Creates a group in the Databricks workspace with a unique name, using the supplied group details.

iam:write
databricks_groups_deleteWRITE

DESTRUCTIVE - Deletes a group from the Databricks workspace.

iam:write
databricks_groups_getREAD

Gets the information for a specific group in the Databricks workspace.

iam:read
databricks_groups_listREAD

Gets all details of the groups associated with the Databricks workspace.

iam:read
databricks_groups_patchWRITE

Partially updates the details of a group.

iam:write
databricks_groups_updateWRITE

Updates the details of a group by replacing the entire group entity.

iam:write
databricks_groups_v2_createWRITE

Creates a group in the Databricks workspace with a unique name, using the supplied group details.

iam:write
databricks_groups_v2_deleteWRITE

DESTRUCTIVE - Deletes a group from the Databricks workspace.

iam:write
databricks_groups_v2_getREAD

Gets the information for a specific group in the Databricks workspace.

iam:read
databricks_groups_v2_listREAD

Gets all details of the groups associated with the Databricks workspace.

iam:read
databricks_groups_v2_patchWRITE

Partially updates the details of a group.

iam:write
databricks_groups_v2_updateWRITE

Updates the details of a group by replacing the entire group entity.

iam:write
databricks_instance_pools_createWRITE

Creates a new instance pool using idle and ready-to-use cloud instances.

compute:write
databricks_instance_pools_deleteWRITE

DESTRUCTIVE - Deletes the instance pool permanently. The idle instances in the pool are terminated asynchronously.

compute:write
databricks_instance_pools_editWRITE

Modifies the configuration of an existing instance pool.

compute:write
databricks_instance_pools_getREAD

Retrieve the information for an instance pool based on its identifier.

compute:read
databricks_instance_pools_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

compute:read
databricks_instance_pools_get_permissionsREAD

Gets the permissions of an instance pool. Instance pools can inherit permissions from their root object.

compute:read
databricks_instance_pools_listREAD

Gets a list of instance pools with their statistics.

compute:read
databricks_instance_profiles_addWRITE

Registers an instance profile in Databricks. In the UI, you can then give users the permission to use this instance profile when launching clusters. This API is only available to admin users.

compute:write
databricks_instance_profiles_editWRITE

The only supported field to change is the optional IAM role ARN associated with the instance profile. It is required to specify the IAM role ARN if both of the following are true: - Your role name and instance profile name do not match. The name is the part...

compute:write
databricks_instance_profiles_listREAD

List the instance profiles that the calling user can use to launch a cluster. This API is available to all users.

compute:read
databricks_instance_profiles_removeWRITE

DESTRUCTIVE - Remove the instance profile with the provided ARN. Existing clusters with this instance profile will continue to function. This API is only accessible to admin users.

compute:write
databricks_ip_access_lists_createWRITE

Creates an IP access list for this workspace. A list can be an allow list or a block list. See the top of this file for a description of how the server treats allow lists and block lists at runtime. When creating or updating an IP access list: - For all...

settings:write
databricks_ip_access_lists_deleteWRITE

DESTRUCTIVE - Deletes an IP access list, specified by its list ID.

settings:write
databricks_ip_access_lists_getREAD

Gets an IP access list, specified by its list ID.

settings:read
databricks_ip_access_lists_listREAD

Gets all IP access lists for the specified workspace.

settings:read
databricks_ip_access_lists_replaceWRITE

Replaces an IP access list, specified by its ID. A list can include allow lists and block lists. See the top of this file for a description of how the server treats allow lists and block lists at run time. When replacing an IP access list: - For all allow...

settings:write
databricks_ip_access_lists_updateWRITE

Updates an existing IP access list, specified by its ID. A list can include allow lists and block lists. See the top of this file for a description of how the server treats allow lists and block lists at run time. When updating an IP access list: - For all...

settings:write
databricks_jobs_cancel_all_runsWRITE

DESTRUCTIVE - Cancels all active runs of a job. The runs are canceled asynchronously, so it doesn't prevent new runs from being started.

jobs:write
databricks_jobs_cancel_runWRITE

DESTRUCTIVE - Cancels a job run or a task run. The run is canceled asynchronously, so it may still be running when this request completes.

jobs:write
databricks_jobs_createWRITE

Create a new job. POST /api/2.2/jobs/create on Databricks.

jobs:write
databricks_jobs_deleteWRITE

DESTRUCTIVE — Deletes a job. POST /api/2.2/jobs/delete on Databricks. Requires job_id.

jobs:write
databricks_jobs_delete_runWRITE

DESTRUCTIVE - Deletes a non-active run. Returns an error if the run is active.

jobs:write
databricks_jobs_export_runREAD

Export and retrieve the job run task. GET /api/2.2/jobs/runs/export on Databricks. Requires run_id.

jobs:read
databricks_jobs_getREAD

Retrieves the details for a single job. Large arrays in the results will be paginated when they exceed 100 elements. A request for a single job will return all properties for that job, and the first 100 elements of array properties (``tasks``...

jobs:read
databricks_jobs_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

jobs:read
databricks_jobs_get_permissionsREAD

Gets the permissions of a job. Jobs can inherit permissions from their root object.

jobs:read
databricks_jobs_get_runREAD

Retrieves the metadata of a run. Large arrays in the results will be paginated when they exceed 100 elements. A request for a single run will return all properties for that run, and the first 100 elements of array properties (``tasks``, ``job_clusters``...

jobs:read
databricks_jobs_get_run_outputREAD

Retrieve the output and metadata of a single task run. When a notebook task returns a value through the ``dbutils.notebook.exit()`` call, you can use this endpoint to retrieve that value. Databricks restricts this API to returning the first 5 MB of the...

jobs:read
databricks_jobs_listREAD

Retrieves a list of jobs. GET /api/2.2/jobs/list on Databricks.

jobs:read
databricks_jobs_list_runsREAD

List runs in descending order by end time. If a run has not finished, it falls back to start time.

jobs:read
databricks_jobs_repair_runWRITE

Re-run one or more tasks. Tasks are re-run as part of the original job run. They use the current job and task settings, and can be viewed in the history for the original job run.

jobs:write
databricks_jobs_resetWRITE

DESTRUCTIVE - Overwrite all settings for the given job. Use the [*Update* endpoint](:method:jobs/update) to update job settings partially.

jobs:write
databricks_jobs_run_nowWRITE

Run a job and return the ``run_id`` of the triggered run.

jobs:write
databricks_jobs_submitWRITE

Submit a one-time run. This endpoint allows you to submit a workload directly without creating a job. Runs submitted using this endpoint don’t display in the UI. Use the ``jobs/runs/get`` API to check the run state after the job is submitted. **Important:**...

jobs:write
databricks_jobs_updateWRITE

Add, update, or remove specific settings of an existing job. Use the [*Reset* endpoint](:method:jobs/reset) to overwrite all job settings.

jobs:write
databricks_knowledge_assistants_create_exampleWRITE

Creates an example for a Knowledge Assistant.

ml:write
databricks_knowledge_assistants_create_knowledge_assistantWRITE

Creates a Knowledge Assistant. POST /api/2.1/knowledge-assistants on Databricks.

ml:write
databricks_knowledge_assistants_create_knowledge_sourceWRITE

Creates a Knowledge Source under a Knowledge Assistant.

ml:write
databricks_knowledge_assistants_delete_exampleWRITE

DESTRUCTIVE - Deletes an example from a Knowledge Assistant.

ml:write
databricks_knowledge_assistants_delete_knowledge_assistantWRITE

DESTRUCTIVE - Deletes a Knowledge Assistant.

ml:write
databricks_knowledge_assistants_delete_knowledge_sourceWRITE

DESTRUCTIVE - Deletes a Knowledge Source.

ml:write
databricks_knowledge_assistants_get_exampleREAD

Gets an example from a Knowledge Assistant.

ml:read
databricks_knowledge_assistants_get_knowledge_assistantREAD

Gets a Knowledge Assistant. GET /api/2.1/{name} on Databricks. Requires name.

ml:read
databricks_knowledge_assistants_get_knowledge_sourceREAD

Gets a Knowledge Source. GET /api/2.1/{name} on Databricks. Requires name.

ml:read
databricks_knowledge_assistants_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

ml:read
databricks_knowledge_assistants_get_permissionsREAD

Gets the permissions of a knowledge assistant. Knowledge assistants can inherit permissions from their root object.

ml:read
databricks_knowledge_assistants_list_examplesREAD

Lists examples under a Knowledge Assistant.

ml:read
databricks_knowledge_assistants_list_knowledge_assistantsREAD

List Knowledge Assistants. GET /api/2.1/knowledge-assistants on Databricks.

ml:read
databricks_knowledge_assistants_list_knowledge_sourcesREAD

Lists Knowledge Sources under a Knowledge Assistant.

ml:read
databricks_knowledge_assistants_sync_knowledge_sourcesWRITE

Sync all non-index Knowledge Sources for a Knowledge Assistant (index sources do not require sync)

ml:write
databricks_knowledge_assistants_update_exampleWRITE

Updates an example in a Knowledge Assistant.

ml:write
databricks_knowledge_assistants_update_knowledge_assistantWRITE

Updates a Knowledge Assistant. PATCH /api/2.1/{name} on Databricks. Requires name, update_mask.

ml:write
databricks_knowledge_assistants_update_knowledge_sourceWRITE

Updates a Knowledge Source. PATCH /api/2.1/{name} on Databricks. Requires name, update_mask.

ml:write
databricks_lakeview_createWRITE

Create a draft dashboard. POST /api/2.0/lakeview/dashboards on Databricks.

sql:write
databricks_lakeview_create_scheduleWRITE

Create dashboard schedule. POST /api/2.0/lakeview/dashboards/{dashboard_id}/schedules on Databricks. Requires dashboard_id.

sql:write
databricks_lakeview_create_subscriptionWRITE

Create schedule subscription. POST /api/2.0/lakeview/dashboards/{dashboard_id}/schedules/{schedule_id}/subscriptions on Databricks. Requires dashboard_id, schedule_id.

sql:write
databricks_lakeview_delete_scheduleWRITE

DESTRUCTIVE - Delete dashboard schedule.

sql:write
databricks_lakeview_delete_subscriptionWRITE

DESTRUCTIVE - Delete schedule subscription.

sql:write
databricks_lakeview_embedded_get_published_dashboard_embeddedREAD

Get the current published dashboard within an embedded context.

sql:read
databricks_lakeview_embedded_get_published_dashboard_token_infoREAD

Get a required authorization details and scopes of a published dashboard to mint an OAuth token.

sql:read
databricks_lakeview_getREAD

Get a draft dashboard. GET /api/2.0/lakeview/dashboards/{dashboard_id} on Databricks. Requires dashboard_id.

sql:read
databricks_lakeview_get_publishedREAD

Get the current published dashboard. GET /api/2.0/lakeview/dashboards/{dashboard_id}/published on Databricks. Requires dashboard_id.

sql:read
databricks_lakeview_get_scheduleREAD

Get dashboard schedule. GET /api/2.0/lakeview/dashboards/{dashboard_id}/schedules/{schedule_id} on Databricks. Requires dashboard_id, schedule_id.

sql:read
databricks_lakeview_get_subscriptionREAD

Get schedule subscription. GET /api/2.0/lakeview/dashboards/{dashboard_id}/schedules/{schedule_id}/subscriptions/{subscription_id} on Databricks. Requires dashboard_id, schedule_id, subscription_id.

sql:read
databricks_lakeview_listREAD

List dashboards. GET /api/2.0/lakeview/dashboards on Databricks.

sql:read
databricks_lakeview_list_schedulesREAD

List dashboard schedules. GET /api/2.0/lakeview/dashboards/{dashboard_id}/schedules on Databricks. Requires dashboard_id.

sql:read
databricks_lakeview_list_subscriptionsREAD

List schedule subscriptions. GET /api/2.0/lakeview/dashboards/{dashboard_id}/schedules/{schedule_id}/subscriptions on Databricks. Requires dashboard_id, schedule_id.

sql:read
databricks_lakeview_migrateWRITE

Migrates a classic SQL dashboard to Lakeview.

sql:write
databricks_lakeview_publishWRITE

Publish the current draft dashboard. POST /api/2.0/lakeview/dashboards/{dashboard_id}/published on Databricks. Requires dashboard_id.

sql:write
databricks_lakeview_revertWRITE

Revert a dashboard's definition in draft mode to the last published version.

sql:write
databricks_lakeview_trashWRITE

DESTRUCTIVE — Trash a dashboard. DELETE /api/2.0/lakeview/dashboards/{dashboard_id} on Databricks. Requires dashboard_id.

sql:write
databricks_lakeview_unpublishWRITE

DESTRUCTIVE — Unpublish the dashboard. DELETE /api/2.0/lakeview/dashboards/{dashboard_id}/published on Databricks. Requires dashboard_id.

sql:write
databricks_lakeview_updateWRITE

Update a draft dashboard. PATCH /api/2.0/lakeview/dashboards/{dashboard_id} on Databricks. Requires dashboard_id.

sql:write
databricks_lakeview_update_scheduleWRITE

Update dashboard schedule. PUT /api/2.0/lakeview/dashboards/{dashboard_id}/schedules/{schedule_id} on Databricks. Requires dashboard_id, schedule_id.

sql:write
databricks_libraries_all_cluster_statusesREAD

Get the status of all libraries on all clusters. A status is returned for all libraries installed on this cluster via the API or the libraries UI.

compute:read
databricks_libraries_cluster_statusREAD

Get the status of libraries on a cluster. A status is returned for all libraries installed on this cluster via the API or the libraries UI. The order of returned libraries is as follows: 1. Libraries set to be installed on this cluster, in the order that...

compute:read
databricks_libraries_create_default_base_environmentWRITE

Create a default base environment within workspaces to define the environment version and a list of dependencies to be used in serverless notebooks and jobs. This process will asynchronously generate a cache to optimize dependency resolution.

compute:write
databricks_libraries_delete_default_base_environmentWRITE

DESTRUCTIVE - Delete the default base environment given an ID. The default base environment may be used by downstream workloads. Please ensure that the deletion is intentional.

compute:write
databricks_libraries_get_default_base_environmentREAD

Return the default base environment details for a given ID.

compute:read
databricks_libraries_installWRITE

Add libraries to install on a cluster. The installation is asynchronous; it happens in the background after the completion of this request.

compute:write
databricks_libraries_list_default_base_environmentsREAD

List default base environments defined in the workspaces for the requested user.

compute:read
databricks_libraries_refresh_default_base_environmentsWRITE

Refresh the cached default base environments for the given IDs. This process will asynchronously regenerate the caches. The existing caches remains available until it expires.

compute:write
databricks_libraries_uninstallWRITE

DESTRUCTIVE - Set libraries to uninstall from a cluster. The libraries won't be uninstalled until the cluster is restarted. A request to uninstall a library that is not currently installed is ignored.

compute:write
databricks_libraries_update_default_base_environmentWRITE

Update the default base environment for the given ID. This process will asynchronously regenerate the cache. The existing cache remains available until it expires.

compute:write
databricks_libraries_update_default_default_base_environmentWRITE

Set the default base environment for the workspace. This marks the specified DBE as the workspace default.

compute:write
databricks_llm_proxy_partner_powered_workspace_deleteWRITE

DESTRUCTIVE - Reverts the enable partner powered AI features workspace setting to its default value.

settings:write
databricks_llm_proxy_partner_powered_workspace_getREAD

Gets the enable partner powered AI features workspace setting.

settings:read
databricks_llm_proxy_partner_powered_workspace_updateWRITE

Updates the enable partner powered AI features workspace setting.

settings:write
databricks_materialized_features_create_feature_tagWRITE

Creates a FeatureTag. POST /api/2.0/feature-store/feature-tables/{table_name}/features/{feature_name}/tags on Databricks. Requires table_name, feature_name.

ml:write
databricks_materialized_features_delete_feature_tagWRITE

DESTRUCTIVE — Deletes a FeatureTag. DELETE /api/2.0/feature-store/feature-tables/{table_name}/features/{feature_name}/tags/{key} on Databricks. Requires table_name, feature_name, key.

ml:write
databricks_materialized_features_get_feature_lineageREAD

Get Feature Lineage. GET /api/2.0/feature-store/feature-tables/{table_name}/features/{feature_name}/lineage on Databricks. Requires table_name, feature_name.

ml:read
databricks_materialized_features_get_feature_tagREAD

Gets a FeatureTag. GET /api/2.0/feature-store/feature-tables/{table_name}/features/{feature_name}/tags/{key} on Databricks. Requires table_name, feature_name, key.

ml:read
databricks_materialized_features_list_feature_tagsREAD

Lists FeatureTags. GET /api/2.0/feature-store/feature-tables/{table_name}/features/{feature_name}/tags on Databricks. Requires table_name, feature_name.

ml:read
databricks_materialized_features_update_feature_tagWRITE

Updates a FeatureTag. PATCH /api/2.0/feature-store/feature-tables/{table_name}/features/{feature_name}/tags/{key} on Databricks. Requires table_name, feature_name, key.

ml:write
databricks_metastores_assignWRITE

Creates a new metastore assignment. If an assignment for the same **workspace_id** exists, it will be overwritten by the new **metastore_id** and **default_catalog_name**. The caller must be an account admin.

catalog:write
databricks_metastores_createWRITE

Creates a new metastore based on a provided name and optional storage root path. By default (if the **owner** field is not set), the owner of the new metastore is the user calling the **createMetastore** API. If the **owner** field is set to the empty...

catalog:write
databricks_metastores_currentREAD

Gets the metastore assignment for the workspace being accessed.

catalog:read
databricks_metastores_deleteWRITE

DESTRUCTIVE - Deletes a metastore. The caller must be a metastore admin.

catalog:write
databricks_metastores_getREAD

Gets a metastore that matches the supplied ID. The caller must be a metastore admin to retrieve this info.

catalog:read
databricks_metastores_listREAD

Gets an array of the available metastores (as **MetastoreInfo** objects). The caller must be an admin to retrieve this info. There is no guarantee of a specific ordering of the elements in the array. NOTE: we recommend using max_results=0 to use the...

catalog:read
databricks_metastores_summaryREAD

Gets information about a metastore. This summary includes the storage credential, the cloud vendor, the cloud region, and the global metastore ID.

catalog:read
databricks_metastores_unassignWRITE

DESTRUCTIVE - Deletes a metastore assignment. The caller must be an account administrator.

catalog:write
databricks_metastores_updateWRITE

Updates information for a specific metastore. The caller must be a metastore admin. If the **owner** field is set to the empty string (**""**), the ownership is updated to the System User.

catalog:write
databricks_metastores_update_assignmentWRITE

Updates a metastore assignment. This operation can be used to update **metastore_id** or **default_catalog_name** for a specified Workspace, if the Workspace is already assigned a metastore. The caller must be an account admin to update **metastore_id**...

catalog:write
databricks_model_registry_approve_transition_requestWRITE

Approves a model version stage transition request.

ml:write
databricks_model_registry_create_commentWRITE

Posts a comment on a model version. A comment can be submitted either by a user or programmatically to display relevant information about the model. For example, test results or deployment errors.

ml:write
databricks_model_registry_create_modelWRITE

Creates a new registered model with the name specified in the request body. Throws ``RESOURCE_ALREADY_EXISTS`` if a registered model with the given name exists.

ml:write
databricks_model_registry_create_model_versionWRITE

Creates a model version. POST /api/2.0/mlflow/model-versions/create on Databricks. Requires name, source.

ml:write
databricks_model_registry_create_transition_requestWRITE

Creates a model version stage transition request.

ml:write
databricks_model_registry_create_webhookWRITE

**NOTE:** This endpoint is in Public Preview. Creates a registry webhook.

ml:write
databricks_model_registry_delete_commentWRITE

DESTRUCTIVE - Deletes a comment on a model version.

ml:write
databricks_model_registry_delete_modelWRITE

DESTRUCTIVE - Deletes a registered model.

ml:write
databricks_model_registry_delete_model_tagWRITE

DESTRUCTIVE - Deletes the tag for a registered model.

ml:write
databricks_model_registry_delete_model_versionWRITE

DESTRUCTIVE — Deletes a model version. DELETE /api/2.0/mlflow/model-versions/delete on Databricks. Requires name, version.

ml:write
databricks_model_registry_delete_model_version_tagWRITE

DESTRUCTIVE - Deletes a model version tag.

ml:write
databricks_model_registry_delete_transition_requestWRITE

DESTRUCTIVE - Cancels a model version stage transition request.

ml:write
databricks_model_registry_delete_webhookWRITE

DESTRUCTIVE - **NOTE:** This endpoint is in Public Preview. Deletes a registry webhook.

ml:write
databricks_model_registry_get_latest_versionsWRITE

Gets the latest version of a registered model.

ml:write
databricks_model_registry_get_modelREAD

Get the details of a model. This is a Databricks workspace version of the `MLflow endpoint `__ that also returns the model's Databricks workspace ID and the permission level of the requesting user on the model.

ml:read
databricks_model_registry_get_model_versionREAD

Get a model version. GET /api/2.0/mlflow/model-versions/get on Databricks. Requires name, version.

ml:read
databricks_model_registry_get_model_version_download_uriREAD

Gets a URI to download the model version.

ml:read
databricks_model_registry_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

ml:read
databricks_model_registry_get_permissionsREAD

Gets the permissions of a registered model. Registered models can inherit permissions from their root object.

ml:read
databricks_model_registry_list_modelsREAD

Lists all available registered models, up to the limit specified in **max_results**.

ml:read
databricks_model_registry_list_transition_requestsREAD

Gets a list of all open stage transition requests for the model version.

ml:read
databricks_model_registry_list_webhooksREAD

**NOTE:** This endpoint is in Public Preview. Lists all registry webhooks.

ml:read
databricks_model_registry_reject_transition_requestWRITE

Rejects a model version stage transition request.

ml:write
databricks_model_registry_rename_modelWRITE

Renames a registered model. POST /api/2.0/mlflow/registered-models/rename on Databricks. Requires name.

ml:write
databricks_model_registry_search_model_versionsREAD

Searches for specific model versions based on the supplied **filter**.

ml:read
databricks_model_registry_search_modelsREAD

Search for registered models based on the specified **filter**.

ml:read
databricks_model_registry_set_model_tagWRITE

Sets a tag on a registered model. POST /api/2.0/mlflow/registered-models/set-tag on Databricks. Requires name, key, value.

ml:write
databricks_model_registry_set_model_version_tagWRITE

Sets a model version tag. POST /api/2.0/mlflow/model-versions/set-tag on Databricks. Requires name, version, key, value.

ml:write
databricks_model_registry_test_registry_webhookWRITE

**NOTE:** This endpoint is in Public Preview. Tests a registry webhook.

ml:write
databricks_model_registry_transition_stageWRITE

Transition a model version's stage. This is a Databricks workspace version of the `MLflow endpoint `__ that also accepts a comment associated with the transition to be recorded.

ml:write
databricks_model_registry_update_commentWRITE

Post an edit to a comment on a model version.

ml:write
databricks_model_registry_update_modelWRITE

Updates a registered model. PATCH /api/2.0/mlflow/registered-models/update on Databricks. Requires name.

ml:write
databricks_model_registry_update_model_versionWRITE

Updates the model version. PATCH /api/2.0/mlflow/model-versions/update on Databricks. Requires name, version.

ml:write
databricks_model_registry_update_webhookWRITE

**NOTE:** This endpoint is in Public Preview. Updates a registry webhook.

ml:write
databricks_model_versions_deleteWRITE

DESTRUCTIVE - Deletes a model version from the specified registered model. Any aliases assigned to the model version will also be deleted. The caller must be a metastore admin or an owner of the parent registered model. For the latter case, the caller must...

catalog:write
databricks_model_versions_getREAD

Get a model version. The caller must be a metastore admin or an owner of (or have the **EXECUTE** privilege on) the parent registered model. For the latter case, the caller must also be the owner or have the **USE_CATALOG** privilege on the parent catalog...

catalog:read
databricks_model_versions_get_by_aliasREAD

Get a model version by alias. The caller must be a metastore admin or an owner of (or have the **EXECUTE** privilege on) the registered model. For the latter case, the caller must also be the owner or have the **USE_CATALOG** privilege on the parent catalog...

catalog:read
databricks_model_versions_listREAD

List model versions. You can list model versions under a particular schema, or list all model versions in the current metastore. The returned models are filtered based on the privileges of the calling user. For example, the metastore admin is able to list...

catalog:read
databricks_model_versions_updateWRITE

Updates the specified model version. The caller must be a metastore admin or an owner of the parent registered model. For the latter case, the caller must also be the owner or have the **USE_CATALOG** privilege on the parent catalog and the **USE_SCHEMA**...

catalog:write
databricks_notification_destinations_createWRITE

Creates a notification destination. Requires workspace admin permissions.

settings:write
databricks_notification_destinations_deleteWRITE

DESTRUCTIVE - Deletes a notification destination. Requires workspace admin permissions.

settings:write
databricks_notification_destinations_getREAD

Gets a notification destination. GET /api/2.0/notification-destinations/{id} on Databricks. Requires id.

settings:read
databricks_notification_destinations_listREAD

Lists notification destinations. GET /api/2.0/notification-destinations on Databricks.

settings:read
databricks_notification_destinations_updateWRITE

Updates a notification destination. Requires workspace admin permissions. At least one field is required in the request body.

settings:write
databricks_online_tables_createWRITE

Create a new Online Table. POST /api/2.0/online-tables on Databricks.

catalog:write
databricks_online_tables_deleteWRITE

DESTRUCTIVE - Delete an online table. Warning: This will delete all the data in the online table. If the source Delta table was deleted or modified since this Online Table was created, this will lose the data forever!

catalog:write
databricks_online_tables_getREAD

Get information about an existing online table and its status.

catalog:read
databricks_permission_migration_migrate_permissionsWRITE

Migrate Permissions. POST /api/2.0/permissionmigration on Databricks. Requires workspace_id, from_workspace_group_name, to_account_group_name.

iam:write
databricks_permissions_getREAD

Gets the permissions of an object. Objects can inherit permissions from their parent objects or root object.

iam:read
databricks_permissions_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

iam:read
databricks_pipelines_apply_environmentWRITE

Applies the current pipeline environment onto the pipeline compute. The environment applied can be used by subsequent dev-mode updates.

jobs:write
databricks_pipelines_cloneWRITE

Creates a new pipeline using Unity Catalog from a pipeline using Hive Metastore. This method returns the ID of the newly created clone. Additionally, this method starts an update for the newly created pipeline.

jobs:write
databricks_pipelines_createWRITE

Creates a new data processing pipeline based on the requested configuration. If successful, this method returns the ID of the new pipeline.

jobs:write
databricks_pipelines_deleteWRITE

DESTRUCTIVE - Deletes a pipeline. If the pipeline publishes to Unity Catalog, pipeline deletion will cascade to all pipeline tables. Please reach out to Databricks support for assistance to undo this action.

jobs:write
databricks_pipelines_getREAD

Get a pipeline. GET /api/2.0/pipelines/{pipeline_id} on Databricks. Requires pipeline_id.

jobs:read
databricks_pipelines_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

jobs:read
databricks_pipelines_get_permissionsREAD

Gets the permissions of a pipeline. Pipelines can inherit permissions from their root object.

jobs:read
databricks_pipelines_get_updateREAD

Gets an update from an active pipeline. GET /api/2.0/pipelines/{pipeline_id}/updates/{update_id} on Databricks. Requires pipeline_id, update_id.

jobs:read
databricks_pipelines_list_pipeline_eventsREAD

Retrieves events for a pipeline. GET /api/2.0/pipelines/{pipeline_id}/events on Databricks. Requires pipeline_id.

jobs:read
databricks_pipelines_list_pipelinesREAD

Lists pipelines defined in the Spark Declarative Pipelines system.

jobs:read
databricks_pipelines_list_updatesREAD

List updates for an active pipeline. GET /api/2.0/pipelines/{pipeline_id}/updates on Databricks. Requires pipeline_id.

jobs:read
databricks_pipelines_restore_pipelineWRITE

Restores a pipeline that was previously deleted, if within the restoration window. All tables deleted at pipeline deletion will be undropped as well.

jobs:write
databricks_pipelines_start_updateWRITE

Starts a new update for the pipeline. If there is already an active update for the pipeline, the request will fail and the active update will remain running.

jobs:write
databricks_pipelines_stopWRITE

Stops the pipeline by canceling the active update. If there is no active update for the pipeline, this request is a no-op.

jobs:write
databricks_pipelines_updateWRITE

Updates a pipeline with the supplied configuration.

jobs:write
databricks_policies_create_policyWRITE

Creates a new policy on a securable. The new policy applies to the securable and all its descendants.

catalog:write
databricks_policies_delete_policyWRITE

DESTRUCTIVE - Delete an ABAC policy defined on a securable.

catalog:write
databricks_policies_get_policyREAD

Get the policy definition on a securable

catalog:read
databricks_policies_list_policiesREAD

List all policies defined on a securable. Optionally, the list can include inherited policies defined on the securable's parent schema or catalog. PAGINATION BEHAVIOR: The API is by default paginated, a page may contain zero results while still providing a...

catalog:read
databricks_policies_update_policyWRITE

Update an ABAC policy on a securable. PATCH /api/2.1/unity-catalog/policies/{on_securable_type}/{on_securable_fullname}/{name} on Databricks. Requires on_securable_type, on_securable_fullname, name.

catalog:write
databricks_policy_compliance_for_clusters_cancel_pending_cluster_enforcementWRITE

DESTRUCTIVE - Cancels a pending enforcement on a cluster. After canceling the pending enforcement, the cluster will no longer update on the next termination or restart. Pending enforcements cannot be canceled when a cluster is in ``TERMINATING`` state. Only...

compute:write
databricks_policy_compliance_for_clusters_enforce_complianceWRITE

Updates a cluster to be compliant with the current version of its policy. If a cluster is updated while in a ``TERMINATED`` state, it will remain ``TERMINATED``. The next time the cluster is started, the new attributes will take effect. For clusters in...

compute:write
databricks_policy_compliance_for_clusters_get_complianceREAD

Returns the policy compliance status of a cluster. Clusters could be out of compliance if their policy was updated after the cluster was last edited.

compute:read
databricks_policy_compliance_for_clusters_list_complianceREAD

Returns the policy compliance status of all clusters that use a given policy. Clusters could be out of compliance if their policy was updated after the cluster was last edited.

compute:read
databricks_policy_compliance_for_jobs_enforce_complianceWRITE

Updates a job so the job clusters that are created when running the job (specified in ``new_cluster``) are compliant with the current versions of their respective cluster policies. All-purpose clusters used in the job will not be updated.

jobs:write
databricks_policy_compliance_for_jobs_get_complianceREAD

Returns the policy compliance status of a job. Jobs could be out of compliance if a cluster policy they use was updated after the job was last edited and some of its job clusters no longer comply with their updated policies.

jobs:read
databricks_policy_compliance_for_jobs_list_complianceREAD

Returns the policy compliance status of all jobs that use a given policy. Jobs could be out of compliance if a cluster policy they use was updated after the job was last edited and its job clusters no longer comply with the updated policy.

jobs:read
databricks_policy_families_getREAD

Retrieve the information for an policy family based on its identifier and version

compute:read
databricks_policy_families_listREAD

Returns the list of policy definition types available to use at their latest version. This API is paginated.

compute:read
databricks_postgres_create_branchWRITE

Creates a new database branch in the project.

database:write
databricks_postgres_create_catalogWRITE

Register a Postgres database in the Unity Catalog.

database:write
databricks_postgres_create_cdf_configWRITE

Create a CDF configuration that materializes the change data feed for all tables in a Postgres schema as open-format Delta tables in Unity Catalog. Once created, each table's change history is continuously written to its corresponding Lakehouse table.

database:write
databricks_postgres_create_data_apiWRITE

Enable Data API for a database. POST /api/2.0/postgres/{parent}/data-api on Databricks. Requires parent.

database:write
databricks_postgres_create_databaseWRITE

Create a Database. Creates a database in the specified branch. A branch can have multiple databases.

database:write
databricks_postgres_create_endpointWRITE

Creates a new compute endpoint in the branch.

database:write
databricks_postgres_create_projectWRITE

Creates a new Lakebase Autoscaling Postgres database project, which contains branches and compute endpoints.

database:write
databricks_postgres_create_replication_group_previewWRITE

Creates a new replication group for the project.

database:write
databricks_postgres_create_roleWRITE

Creates a new Postgres role in the branch.

database:write
databricks_postgres_create_snapshotWRITE

Creates a snapshot, an immutable point-in-time copy of a branch's data, within the project.

database:write
databricks_postgres_create_synced_tableWRITE

Create a Synced Table. POST /api/2.0/postgres/synced_tables on Databricks. Requires synced_table_id.

database:write
databricks_postgres_create_tableWRITE

Create a Table (non-synced database table for Autoscaling v2 Lakebase projects).

database:write
databricks_postgres_delete_branchWRITE

DESTRUCTIVE - Deletes the specified database branch.

database:write
databricks_postgres_delete_catalogWRITE

DESTRUCTIVE - Delete a Database Catalog.

database:write
databricks_postgres_delete_cdf_configWRITE

DESTRUCTIVE - Delete a CDF configuration and stop materializing the change data feed. When force=true, also drops the Delta tables in Unity Catalog. When force=false (default), the existing tables are preserved at their last state.

database:write
databricks_postgres_delete_data_apiWRITE

DESTRUCTIVE - Disable Data API for a database.

database:write
databricks_postgres_delete_databaseWRITE

DESTRUCTIVE — Delete a Database. DELETE /api/2.0/postgres/{name} on Databricks. Requires name.

database:write
databricks_postgres_delete_endpointWRITE

DESTRUCTIVE - Deletes the specified compute endpoint.

database:write
databricks_postgres_delete_forward_etl_configurationWRITE

DESTRUCTIVE - Hard delete a Forward ETL configuration and all associated table mappings. Unlike DisableForwardEtl, this permanently removes the config and mapping rows.

database:write
databricks_postgres_delete_projectWRITE

DESTRUCTIVE - Deletes the specified database project.

database:write
databricks_postgres_delete_recovery_branch_previewWRITE

DESTRUCTIVE - Deletes the specified recovery branch after reconciliation is complete.

database:write
databricks_postgres_delete_replication_group_previewWRITE

DESTRUCTIVE - Deletes the specified replication group.

database:write
databricks_postgres_delete_roleWRITE

DESTRUCTIVE - Deletes the specified Postgres role.

database:write
databricks_postgres_delete_snapshotWRITE

DESTRUCTIVE - Deletes the specified snapshot.

database:write
databricks_postgres_delete_synced_tableWRITE

DESTRUCTIVE — Delete a Synced Table. DELETE /api/2.0/postgres/{name} on Databricks. Requires name.

database:write
databricks_postgres_delete_tableWRITE

DESTRUCTIVE - Delete a Table (non-synced database table for Autoscaling v2 Lakebase projects).

database:write
databricks_postgres_disable_forward_etlWRITE

DESTRUCTIVE - Disable Forward ETL for a branch.

database:write
databricks_postgres_failover_replication_group_previewWRITE

Fails over the replication group to a target workspace, promoting the secondary to primary.

database:write
databricks_postgres_generate_database_credentialWRITE

Generate OAuth credentials for a Postgres database.

database:write
databricks_postgres_get_branchREAD

Retrieves information about the specified database branch.

database:read
databricks_postgres_get_catalogREAD

Get a Database Catalog. GET /api/2.0/postgres/{name} on Databricks. Requires name.

database:read
databricks_postgres_get_cdf_configREAD

Get a single Lakebase CDF configuration, including the source Postgres schema, target Unity Catalog schema, and the identity under which writes are authorized.

database:read
databricks_postgres_get_cdf_statusREAD

Get the CDF status of a single table within a Lakebase CDF configuration, including its current state and the last committed position in the feed.

database:read
databricks_postgres_get_compute_instanceREAD

Lists the specific compute instance under an endpoint. Note: ComputeInstances are managed via the parent Endpoint resource, and cannot be created, updated, or deleted directly.

database:read
databricks_postgres_get_data_apiREAD

Get Data API configuration for a database.

database:read
databricks_postgres_get_databaseREAD

Get a Database. GET /api/2.0/postgres/{name} on Databricks. Requires name.

database:read
databricks_postgres_get_endpointREAD

Retrieves information about the specified compute endpoint, including its connection details and operational state.

database:read
databricks_postgres_get_forward_etl_metadataREAD

Get Forward ETL metadata (database and schema OIDs).

database:read
databricks_postgres_get_forward_etl_statusREAD

Get Forward ETL configuration and status for a branch.

database:read
databricks_postgres_get_operationREAD

Retrieves the status of a long-running operation.

database:read
databricks_postgres_get_projectREAD

Retrieves information about the specified database project.

database:read
databricks_postgres_get_recovery_branch_previewREAD

Retrieves information about the specified recovery branch.

database:read
databricks_postgres_get_replication_group_previewREAD

Retrieves information about the specified replication group.

database:read
databricks_postgres_get_roleREAD

Retrieves information about the specified Postgres role, including its authentication method and permissions.

database:read
databricks_postgres_get_snapshotREAD

Retrieves information about the specified snapshot.

database:read
databricks_postgres_get_snapshot_scheduleREAD

Retrieves the snapshot schedule for a branch. A branch with no configured schedule returns an empty schedule (not NOT_FOUND).

database:read
databricks_postgres_get_synced_tableREAD

Get a Synced Table. GET /api/2.0/postgres/{name} on Databricks. Requires name.

database:read
databricks_postgres_get_tableREAD

Get a Table (non-synced database table for Autoscaling v2 Lakebase projects).

database:read
databricks_postgres_inspect_recovery_branch_previewWRITE

Materializes a temporary inspection branch from the specified recovery branch for data examination.

database:write
databricks_postgres_list_branchesREAD

Returns a paginated list of database branches in the project.

database:read
databricks_postgres_list_cdf_configsREAD

List all CDF configurations for a Lakebase database. Each configuration maps a Postgres schema to a Unity Catalog schema where the change data feed is materialized.

database:read
databricks_postgres_list_cdf_statusesREAD

List the per-table CDF statuses within a Lakebase CDF configuration. Each status shows whether a table's change data feed is snapshotting, streaming, or skipped.

database:read
databricks_postgres_list_compute_instancesREAD

Lists all compute instances that have been created under the specified endpoint. Note: ComputeInstances are managed via the parent Endpoint resource, and cannot be created, updated, or deleted directly.

database:read
databricks_postgres_list_databasesREAD

List Databases. GET /api/2.0/postgres/{parent}/databases on Databricks. Requires parent.

database:read
databricks_postgres_list_endpointsREAD

Returns a paginated list of compute endpoints in the branch.

database:read
databricks_postgres_list_projectsREAD

Returns a paginated list of database projects in the workspace that the user has permission to access.

database:read
databricks_postgres_list_recovery_branch_previewsREAD

Returns a paginated list of recovery branches for the project.

database:read
databricks_postgres_list_replication_group_previewsREAD

Returns a paginated list of replication groups for the project.

database:read
databricks_postgres_list_rolesREAD

Returns a paginated list of Postgres roles in the branch.

database:read
databricks_postgres_list_snapshotsREAD

Returns a paginated list of snapshots in the project.

database:read
databricks_postgres_switchover_replication_group_previewWRITE

Switches over the replication group to a target workspace with a coordinated failover.

database:write
databricks_postgres_undelete_branchWRITE

Undeletes the specified database branch.

database:write
databricks_postgres_undelete_projectWRITE

Undeletes a soft-deleted project. POST /api/2.0/postgres/{name}/undelete on Databricks. Requires name.

database:write
databricks_postgres_update_branchWRITE

Updates the specified database branch. You can set this branch as the project's default branch, or protect/unprotect it.

database:write
databricks_postgres_update_data_apiWRITE

Update Data API configuration for a database.

database:write
databricks_postgres_update_databaseWRITE

Update a Database. PATCH /api/2.0/postgres/{name} on Databricks. Requires name, update_mask.

database:write
databricks_postgres_update_endpointWRITE

Updates the specified compute endpoint. You can update autoscaling limits, suspend timeout, or enable/disable the compute endpoint.

database:write
databricks_postgres_update_projectWRITE

Updates the specified database project. PATCH /api/2.0/postgres/{name} on Databricks. Requires name, update_mask.

database:write
databricks_postgres_update_replication_group_previewWRITE

Updates the specified replication group.

database:write
databricks_postgres_update_roleWRITE

Update a role for a branch. PATCH /api/2.0/postgres/{name} on Databricks. Requires name, update_mask.

database:write
databricks_postgres_update_snapshot_scheduleWRITE

Sets the snapshot schedule for a branch. The ``schedule`` field is replaced wholesale; an empty schedule disables automatic snapshots.

database:write
databricks_provider_exchange_filters_createWRITE

Add an exchange filter. POST /api/2.0/marketplace-exchange/filters on Databricks. Requires filter.

marketplace:write
databricks_provider_exchange_filters_deleteWRITE

DESTRUCTIVE — Delete an exchange filter. DELETE /api/2.0/marketplace-exchange/filters/{id} on Databricks. Requires id.

marketplace:write
databricks_provider_exchange_filters_listREAD

List exchange filter. GET /api/2.0/marketplace-exchange/filters on Databricks. Requires exchange_id.

marketplace:read
databricks_provider_exchange_filters_updateWRITE

Update an exchange filter. PUT /api/2.0/marketplace-exchange/filters/{id} on Databricks. Requires id, filter.

marketplace:write
databricks_provider_exchanges_add_listing_to_exchangeWRITE

Associate an exchange with a listing. POST /api/2.0/marketplace-exchange/exchanges-for-listing on Databricks. Requires listing_id, exchange_id.

marketplace:write
databricks_provider_exchanges_createWRITE

Create an exchange. POST /api/2.0/marketplace-exchange/exchanges on Databricks. Requires exchange.

marketplace:write
databricks_provider_exchanges_deleteWRITE

DESTRUCTIVE - This removes a listing from marketplace.

marketplace:write
databricks_provider_exchanges_delete_listing_from_exchangeWRITE

DESTRUCTIVE - Disassociate an exchange with a listing

marketplace:write
databricks_provider_exchanges_getREAD

Get an exchange. GET /api/2.0/marketplace-exchange/exchanges/{id} on Databricks. Requires id.

marketplace:read
databricks_provider_exchanges_listREAD

List exchanges visible to provider. GET /api/2.0/marketplace-exchange/exchanges on Databricks.

marketplace:read
databricks_provider_exchanges_list_exchanges_for_listingREAD

List exchanges associated with a listing

marketplace:read
databricks_provider_exchanges_list_listings_for_exchangeREAD

List listings associated with an exchange

marketplace:read
databricks_provider_exchanges_updateWRITE

Update an exchange. PUT /api/2.0/marketplace-exchange/exchanges/{id} on Databricks. Requires id, exchange.

marketplace:write
databricks_provider_files_createWRITE

Create a file. Currently, only provider icons and attached notebooks are supported.

marketplace:write
databricks_provider_files_deleteWRITE

DESTRUCTIVE — Delete a file. DELETE /api/2.0/marketplace-provider/files/{file_id} on Databricks. Requires file_id.

marketplace:write
databricks_provider_files_getREAD

Get a file. GET /api/2.0/marketplace-provider/files/{file_id} on Databricks. Requires file_id.

marketplace:read
databricks_provider_files_listREAD

List files attached to a parent entity. GET /api/2.0/marketplace-provider/files on Databricks. Requires file_parent.

marketplace:read
databricks_provider_listings_createWRITE

Create a new listing. POST /api/2.0/marketplace-provider/listing on Databricks. Requires listing.

marketplace:write
databricks_provider_listings_deleteWRITE

DESTRUCTIVE — Delete a listing. DELETE /api/2.0/marketplace-provider/listings/{id} on Databricks. Requires id.

marketplace:write
databricks_provider_listings_getREAD

Get a listing. GET /api/2.0/marketplace-provider/listings/{id} on Databricks. Requires id.

marketplace:read
databricks_provider_listings_listREAD

List listings owned by this provider. GET /api/2.0/marketplace-provider/listings on Databricks.

marketplace:read
databricks_provider_listings_updateWRITE

Update a listing. PUT /api/2.0/marketplace-provider/listings/{id} on Databricks. Requires id, listing.

marketplace:write
databricks_provider_personalization_requests_listREAD

List personalization requests to this provider. This will return all personalization requests, regardless of which listing they are for.

marketplace:read
databricks_provider_personalization_requests_updateWRITE

Update personalization request. This method only permits updating the status of the request.

marketplace:write
databricks_provider_provider_analytics_dashboards_createWRITE

Create provider analytics dashboard. Returns Marketplace specific ``id``. Not to be confused with the Lakeview dashboard id.

marketplace:write
databricks_provider_provider_analytics_dashboards_getREAD

Get provider analytics dashboard. GET /api/2.0/marketplace-provider/analytics_dashboard on Databricks.

marketplace:read
databricks_provider_provider_analytics_dashboards_get_latest_versionREAD

Get latest version of provider analytics dashboard.

marketplace:read
databricks_provider_provider_analytics_dashboards_updateWRITE

Update provider analytics dashboard. PUT /api/2.0/marketplace-provider/analytics_dashboard/{id} on Databricks. Requires id.

marketplace:write
databricks_provider_providers_createWRITE

Create a provider. POST /api/2.0/marketplace-provider/provider on Databricks. Requires provider.

marketplace:write
databricks_provider_providers_deleteWRITE

DESTRUCTIVE — Delete provider. DELETE /api/2.0/marketplace-provider/providers/{id} on Databricks. Requires id.

marketplace:write
databricks_provider_providers_getREAD

Get provider profile. GET /api/2.0/marketplace-provider/providers/{id} on Databricks. Requires id.

marketplace:read
databricks_provider_providers_listREAD

List provider profiles for account. GET /api/2.0/marketplace-provider/providers on Databricks.

marketplace:read
databricks_provider_providers_updateWRITE

Update provider profile. PUT /api/2.0/marketplace-provider/providers/{id} on Databricks. Requires id, provider.

marketplace:write
databricks_providers_createWRITE

Creates a new authentication provider minimally based on a name and authentication type. The caller must be an admin on the metastore.

catalog:write
databricks_providers_deleteWRITE

DESTRUCTIVE - Deletes an authentication provider, if the caller is a metastore admin or is the owner of the provider.

catalog:write
databricks_providers_getREAD

Gets a specific authentication provider. The caller must supply the name of the provider, and must either be a metastore admin or the owner of the provider.

catalog:read
databricks_providers_listREAD

Gets an array of available authentication providers. The caller must either be a metastore admin, have the **USE_PROVIDER** privilege on the providers, or be the owner of the providers. Providers not owned by the caller and for which the caller does not...

catalog:read
databricks_providers_list_provider_share_assetsREAD

Get arrays of assets associated with a specified provider's share. The caller is the recipient of the share.

catalog:read
databricks_providers_list_sharesREAD

Gets an array of a specified provider's shares within the metastore where: - the caller is a metastore admin, or - the caller is the owner.

catalog:read
databricks_providers_updateWRITE

Updates the information for an authentication provider, if the caller is a metastore admin or is the owner of the provider. If the update changes the provider name, the caller must be both a metastore admin and the owner of the provider.

catalog:write
databricks_quality_monitor_v2_create_quality_monitorWRITE

Deprecated: Use Data Quality Monitoring API instead (/api/data-quality/v1/monitors). Create a quality monitor on UC object.

catalog:write
databricks_quality_monitor_v2_delete_quality_monitorWRITE

DESTRUCTIVE - Deprecated: Use Data Quality Monitoring API instead (/api/data-quality/v1/monitors). Delete a quality monitor on UC object.

catalog:write
databricks_quality_monitor_v2_get_quality_monitorREAD

Deprecated: Use Data Quality Monitoring API instead (/api/data-quality/v1/monitors). Read a quality monitor on UC object.

catalog:read
databricks_quality_monitor_v2_list_quality_monitorREAD

Deprecated: Use Data Quality Monitoring API instead (/api/data-quality/v1/monitors). (Unimplemented) List quality monitors.

catalog:read
databricks_quality_monitor_v2_update_quality_monitorWRITE

Deprecated: Use Data Quality Monitoring API instead (/api/data-quality/v1/monitors). (Unimplemented) Update a quality monitor on UC object.

catalog:write
databricks_quality_monitors_cancel_refreshWRITE

DESTRUCTIVE - Deprecated: Use Data Quality Monitors API instead (/api/data-quality/v1/monitors). Cancels an already-initiated refresh job.

catalog:write
databricks_quality_monitors_createWRITE

Deprecated: Use Data Quality Monitors API instead (/api/data-quality/v1/monitors). Creates a new monitor for the specified table. The caller must either: 1. be an owner of the table's parent catalog, have **USE_SCHEMA** on the table's parent schema, and...

catalog:write
databricks_quality_monitors_deleteWRITE

DESTRUCTIVE - Deprecated: Use Data Quality Monitors API instead (/api/data-quality/v1/monitors). Deletes a monitor for the specified table. The caller must either: 1. be an owner of the table's parent catalog 2. have **USE_CATALOG** on the table's parent...

catalog:write
databricks_quality_monitors_getREAD

Deprecated: Use Data Quality Monitors API instead (/api/data-quality/v1/monitors). Gets a monitor for the specified table. The caller must either: 1. be an owner of the table's parent catalog 2. have **USE_CATALOG** on the table's parent catalog and be an...

catalog:read
databricks_quality_monitors_get_refreshREAD

Deprecated: Use Data Quality Monitors API instead (/api/data-quality/v1/monitors). Gets info about a specific monitor refresh using the given refresh ID. The caller must either: 1. be an owner of the table's parent catalog 2. have **USE_CATALOG** on the...

catalog:read
databricks_quality_monitors_list_refreshesREAD

Deprecated: Use Data Quality Monitors API instead (/api/data-quality/v1/monitors). Gets an array containing the history of the most recent refreshes (up to 25) for this table. The caller must either: 1. be an owner of the table's parent catalog 2. have...

catalog:read
databricks_quality_monitors_regenerate_dashboardWRITE

Deprecated: Use Data Quality Monitors API instead (/api/data-quality/v1/monitors). Regenerates the monitoring dashboard for the specified table. The caller must either: 1. be an owner of the table's parent catalog 2. have **USE_CATALOG** on the table's...

catalog:write
databricks_quality_monitors_run_refreshWRITE

Deprecated: Use Data Quality Monitors API instead (/api/data-quality/v1/monitors). Queues a metric refresh on the monitor for the specified table. The refresh will execute in the background. The caller must either: 1. be an owner of the table's parent...

catalog:write
databricks_quality_monitors_updateWRITE

Deprecated: Use Data Quality Monitors API instead (/api/data-quality/v1/monitors). Updates a monitor for the specified table. The caller must either: 1. be an owner of the table's parent catalog 2. have **USE_CATALOG** on the table's parent catalog and be...

catalog:write
databricks_queries_createWRITE

Creates a query. POST /api/2.0/sql/queries on Databricks.

sql:write
databricks_queries_deleteWRITE

DESTRUCTIVE - Moves a query to the trash. Trashed queries immediately disappear from searches and list views, and cannot be used for alerts. You can restore a trashed query through the UI. A trashed query is permanently deleted after 30 days.

sql:write
databricks_queries_getREAD

Gets a query. GET /api/2.0/sql/queries/{id} on Databricks. Requires id.

sql:read
databricks_queries_legacy_createWRITE

Creates a new query definition. Queries created with this endpoint belong to the authenticated user making the request. The ``data_source_id`` field specifies the ID of the SQL warehouse to run this query against. You can use the Data Sources API to see a...

sql:write
databricks_queries_legacy_deleteWRITE

DESTRUCTIVE - Moves a query to the trash. Trashed queries immediately disappear from searches and list views, and they cannot be used for alerts. The trash is deleted after 30 days. **Warning**: This API is deprecated. Please use :method:queries/delete...

sql:write
databricks_queries_legacy_getREAD

Retrieve a query object definition along with contextual permissions information about the currently authenticated user. **Warning**: This API is deprecated. Please use :method:queries/get instead. `Learn more `__

sql:read
databricks_queries_legacy_listREAD

Gets a list of queries. Optionally, this list can be filtered by a search term. **Warning**: Calling this API concurrently 10 or more times could result in throttling, service degradation, or a temporary ban. **Warning**: This API is deprecated. Please use...

sql:read
databricks_queries_legacy_restoreWRITE

Restore a query that has been moved to the trash. A restored query appears in list views and searches. You can use restored queries for alerts. **Warning**: This API is deprecated. Please see the latest version. `Learn more `__

sql:write
databricks_queries_legacy_updateWRITE

Modify this query definition. **Note**: You cannot undo this operation. **Warning**: This API is deprecated. Please use :method:queries/update instead. `Learn more `__

sql:write
databricks_queries_listREAD

Gets a list of queries accessible to the user, ordered by creation time. **Warning:** Calling this API concurrently 10 or more times could result in throttling, service degradation, or a temporary ban.

sql:read
databricks_queries_list_visualizationsREAD

Gets a list of visualizations on a query.

sql:read
databricks_queries_updateWRITE

Updates a query. PATCH /api/2.0/sql/queries/{id} on Databricks. Requires id, update_mask.

sql:write
databricks_query_history_listREAD

List the history of queries through SQL warehouses, and serverless compute. You can filter by user ID, warehouse ID, status, and time range. Most recently started queries are returned first (up to max_results in request). The pagination token returned in...

sql:read
databricks_query_visualizations_createWRITE

Adds a visualization to a query. POST /api/2.0/sql/visualizations on Databricks.

sql:write
databricks_query_visualizations_deleteWRITE

DESTRUCTIVE — Removes a visualization. DELETE /api/2.0/sql/visualizations/{id} on Databricks. Requires id.

sql:write
databricks_query_visualizations_legacy_createWRITE

Creates visualization in the query. **Warning**: This API is deprecated. Please use :method:queryvisualizations/create instead. `Learn more `__

sql:write
databricks_query_visualizations_legacy_deleteWRITE

DESTRUCTIVE - Removes a visualization from the query. **Warning**: This API is deprecated. Please use :method:queryvisualizations/delete instead. `Learn more `__

sql:write
databricks_query_visualizations_legacy_updateWRITE

Updates visualization in the query. **Warning**: This API is deprecated. Please use :method:queryvisualizations/update instead. `Learn more `__

sql:write
databricks_query_visualizations_updateWRITE

Updates a visualization. PATCH /api/2.0/sql/visualizations/{id} on Databricks. Requires id, update_mask.

sql:write
databricks_recipient_activation_get_activation_url_infoREAD

Gets an activation URL for a share. GET /api/2.1/unity-catalog/public/data_sharing_activation_info/{activation_url} on Databricks. Requires activation_url.

catalog:read
databricks_recipient_federation_policies_createWRITE

Create a federation policy for an OIDC_FEDERATION recipient for sharing data from Databricks to non-Databricks recipients. The caller must be the owner of the recipient. When sharing data from Databricks to non-Databricks clients, you can define a...

catalog:write
databricks_recipient_federation_policies_deleteWRITE

DESTRUCTIVE - Deletes an existing federation policy for an OIDC_FEDERATION recipient. The caller must be the owner of the recipient.

catalog:write
databricks_recipient_federation_policies_get_federation_policyREAD

Reads an existing federation policy for an OIDC_FEDERATION recipient for sharing data from Databricks to non-Databricks recipients. The caller must have read access to the recipient.

catalog:read
databricks_recipient_federation_policies_listREAD

Lists federation policies for an OIDC_FEDERATION recipient for sharing data from Databricks to non-Databricks recipients. The caller must have read access to the recipient.

catalog:read
databricks_recipient_federation_policies_updateWRITE

Updates an existing federation policy for an OIDC_RECIPIENT. The caller must be the owner of the recipient.

catalog:write
databricks_recipients_createWRITE

Creates a new recipient with the delta sharing authentication type in the metastore. The caller must be a metastore admin or have the **CREATE_RECIPIENT** privilege on the metastore.

catalog:write
databricks_recipients_deleteWRITE

DESTRUCTIVE - Deletes the specified recipient from the metastore. The caller must be the owner of the recipient.

catalog:write
databricks_recipients_getREAD

Gets a share recipient from the metastore. The caller must be one of: - A user with **USE_RECIPIENT** privilege on the metastore - The owner of the share recipient - A metastore admin

catalog:read
databricks_recipients_listREAD

Gets an array of all share recipients within the current metastore where: - the caller is a metastore admin, or - the caller is the owner. There is no guarantee of a specific ordering of the elements in the array.

catalog:read
databricks_recipients_share_permissionsREAD

Gets the share permissions for the specified Recipient. The caller must have the **USE_RECIPIENT** privilege on the metastore or be the owner of the Recipient.

catalog:read
databricks_recipients_updateWRITE

Updates an existing recipient in the metastore. The caller must be a metastore admin or the owner of the recipient. If the recipient name will be updated, the user must be both a metastore admin and the owner of the recipient.

catalog:write
databricks_redash_config_get_configREAD

Read workspace configuration for Redash-v2.

sql:read
databricks_registered_models_createWRITE

Creates a new registered model in Unity Catalog. File storage for model versions in the registered model will be located in the default location which is specified by the parent schema, or the parent catalog, or the Metastore. For registered model creation...

catalog:write
databricks_registered_models_deleteWRITE

DESTRUCTIVE - Deletes a registered model and all its model versions from the specified parent catalog and schema. The caller must be a metastore admin or an owner of the registered model. For the latter case, the caller must also be the owner or have the...

catalog:write
databricks_registered_models_delete_aliasWRITE

DESTRUCTIVE - Deletes a registered model alias. The caller must be a metastore admin or an owner of the registered model. For the latter case, the caller must also be the owner or have the **USE_CATALOG** privilege on the parent catalog and the **USE_SCHEMA**...

catalog:write
databricks_registered_models_getREAD

Get a registered model. The caller must be a metastore admin or an owner of (or have the **EXECUTE** privilege on) the registered model. For the latter case, the caller must also be the owner or have the **USE_CATALOG** privilege on the parent catalog and...

catalog:read
databricks_registered_models_listREAD

List registered models. You can list registered models under a particular schema, or list all registered models in the current metastore. The returned models are filtered based on the privileges of the calling user. For example, the metastore admin is able...

catalog:read
databricks_registered_models_set_aliasWRITE

Set an alias on the specified registered model. The caller must be a metastore admin or an owner of the registered model. For the latter case, the caller must also be the owner or have the **USE_CATALOG** privilege on the parent catalog and the...

catalog:write
databricks_registered_models_updateWRITE

Updates the specified registered model. The caller must be a metastore admin or an owner of the registered model. For the latter case, the caller must also be the owner or have the **USE_CATALOG** privilege on the parent catalog and the **USE_SCHEMA**...

catalog:write
databricks_repos_createWRITE

Creates a repo in the workspace and links it to the remote Git repo specified. Note that repos created programmatically must be linked to a remote Git repo, unlike repos created in the browser.

workspace:write
databricks_repos_deleteWRITE

DESTRUCTIVE - Deletes the specified repo.

workspace:write
databricks_repos_getREAD

Returns the repo with the given repo ID.

workspace:read
databricks_repos_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

workspace:read
databricks_repos_get_permissionsREAD

Gets the permissions of a repo. Repos can inherit permissions from their root object.

workspace:read
databricks_repos_listREAD

Returns repos that the calling user has Manage permissions on. Use ``next_page_token`` to iterate through additional pages. Deprecated: This operation does not return a complete list of the repos in the workspace, because repos with the Git CLI enabled are...

workspace:read
databricks_repos_updateWRITE

Updates the repo to a different branch or tag, or updates the repo to the latest commit on the same branch.

workspace:write
databricks_resource_quotas_get_quotaREAD

The GetQuota API returns usage information for a single resource quota, defined as a child-parent pair. This API also refreshes the quota count if it is out of date. Refreshes are triggered asynchronously. The updated count might not be returned in the...

catalog:read
databricks_resource_quotas_list_quotasREAD

ListQuotas returns all quota values under the metastore. There are no SLAs on the freshness of the counts returned. This API does not trigger a refresh of quota counts. PAGINATION BEHAVIOR: The API is by default paginated, a page may contain zero results...

catalog:read
databricks_restrict_workspace_admins_deleteWRITE

DESTRUCTIVE - Reverts the restrict workspace admins setting status for the workspace. A fresh etag needs to be provided in ``DELETE`` requests (as a query parameter). The etag can be retrieved by making a ``GET`` request before the DELETE request. If the...

settings:write
databricks_restrict_workspace_admins_getREAD

Gets the restrict workspace admins setting.

settings:read
databricks_restrict_workspace_admins_updateWRITE

Updates the restrict workspace admins setting for the workspace. A fresh etag needs to be provided in ``PATCH`` requests (as part of the setting field). The etag can be retrieved by making a GET request before the ``PATCH`` request. If the setting is...

settings:write
databricks_rfa_batch_create_access_requestsWRITE

Creates access requests for Unity Catalog permissions for a specified principal on a securable object. This Batch API can take in multiple principals, securable objects, and permissions as the input and returns the access request destinations for each...

catalog:write
databricks_rfa_get_access_request_destinationsREAD

Gets an array of access request destinations for the specified securable. Any caller can see URL destinations or the destinations on the metastore. Otherwise, only those with **BROWSE** permissions on the securable can see destinations. The supported...

catalog:read
databricks_rfa_update_access_request_destinationsWRITE

Updates the access request destinations for the given securable. The caller must be a metastore admin, the owner of the securable, or a user that has the **MANAGE** privilege on the securable in order to assign destinations. A maximum of 5 emails and 5...

catalog:write
databricks_schemas_createWRITE

Creates a new schema for catalog in the Metastore. The caller must be a metastore admin, or have the **CREATE_SCHEMA** privilege in the parent catalog.

catalog:write
databricks_schemas_deleteWRITE

DESTRUCTIVE - Deletes the specified schema from the parent catalog. The caller must be the owner of the schema or an owner of the parent catalog.

catalog:write
databricks_schemas_getREAD

Gets the specified schema within the metastore. The caller must be a metastore admin, the owner of the schema, or a user that has the **USE_SCHEMA** privilege on the schema.

catalog:read
databricks_schemas_listREAD

Gets an array of schemas for a catalog in the metastore. If the caller is the metastore admin or the owner of the parent catalog, all schemas for the catalog will be retrieved. Otherwise, only schemas owned by the caller (or for which the caller has the...

catalog:read
databricks_schemas_updateWRITE

Updates a schema for a catalog. The caller must be the owner of the schema or a metastore admin. If the caller is a metastore admin, only the **owner** field can be changed in the update. If the **name** field must be updated, the caller must be a metastore...

catalog:write
databricks_secrets_create_scopeWRITE

Creates a new secret scope. The scope name must consist of alphanumeric characters, dashes, underscores, and periods, and may not exceed 128 characters. Example request: .. code:: { "scope": "my-simple-databricks-scope", "initial_manage_principal": "users"...

workspace:write
databricks_secrets_delete_aclWRITE

DESTRUCTIVE - Deletes the given ACL on the given scope. Users must have the ``MANAGE`` permission to invoke this API. Example request: .. code:: { "scope": "my-secret-scope", "principal": "data-scientists" } Throws ``RESOURCE_DOES_NOT_EXIST`` if no such...

workspace:write
databricks_secrets_delete_scopeWRITE

DESTRUCTIVE - Deletes a secret scope. Example request: .. code:: { "scope": "my-secret-scope" } Throws ``RESOURCE_DOES_NOT_EXIST`` if the scope does not exist. Throws ``PERMISSION_DENIED`` if the user does not have permission to make this API call. Throws...

workspace:write
databricks_secrets_delete_secretWRITE

DESTRUCTIVE - Deletes the secret stored in this secret scope. You must have ``WRITE`` or ``MANAGE`` permission on the Secret Scope. Example request: .. code:: { "scope": "my-secret-scope", "key": "my-secret-key" } Throws ``RESOURCE_DOES_NOT_EXIST`` if no such...

workspace:write
databricks_secrets_get_aclREAD

Describes the details about the given ACL, such as the group and permission. Users must have the ``MANAGE`` permission to invoke this API. Example response: .. code:: { "principal": "data-scientists", "permission": "READ" } Throws...

workspace:read
databricks_secrets_get_secretREAD

Gets a secret for a given key and scope. This API can only be called from the DBUtils interface. Users need the READ permission to make this call. Example response: .. code:: { "key": "my-string-key", "value": } Note that the secret value returned is in...

workspace:read
databricks_secrets_list_aclsREAD

Lists the ACLs set on the given scope. Users must have the ``MANAGE`` permission to invoke this API. Example response: .. code:: { "acls": [{ "principal": "admins", "permission": "MANAGE" },{ "principal": "data-scientists", "permission": "READ" }] } Throws...

workspace:read
databricks_secrets_list_scopesREAD

Lists all secret scopes available in the workspace. Example response: .. code:: { "scopes": [{ "name": "my-databricks-scope", "backend_type": "DATABRICKS" },{ "name": "mount-points", "backend_type": "DATABRICKS" }] } Throws ``PERMISSION_DENIED`` if the user...

workspace:read
databricks_secrets_list_secretsREAD

Lists the secret keys that are stored at this scope. This is a metadata-only operation; secret data cannot be retrieved using this API. Users need the READ permission to make this call. Example response: .. code:: { "secrets": [ { "key": "my-string-key""...

workspace:read
databricks_secrets_put_aclWRITE

Creates or overwrites the ACL associated with the given principal (user or group) on the specified scope point. In general, a user or group will use the most powerful permission available to them, and permissions are ordered as follows: - ``MANAGE`` -...

workspace:write
databricks_secrets_put_secretWRITE

Inserts a secret under the provided scope with the given name. If a secret already exists with the same name, this command overwrites the existing secret's value. The server encrypts the secret using the secret scope's encryption settings before storing it...

workspace:write
databricks_secrets_uc_create_secretWRITE

Creates a new secret in Unity Catalog. You must be the owner of the parent schema or have the **CREATE_SECRET** and **USE SCHEMA** privileges on the parent schema and **USE CATALOG** on the parent catalog. The secret is stored in the specified catalog and...

catalog:write
databricks_secrets_uc_delete_secretWRITE

DESTRUCTIVE - Deletes a secret by its three-level (fully qualified) name. You must be the owner of the secret or a metastore admin.

catalog:write
databricks_secrets_uc_get_secretREAD

Gets a secret by its three-level (fully qualified) name. You must be a metastore admin, the owner of the secret, or have the **MANAGE** privilege on the secret. The secret value isn't returned by default. To retrieve it, you must also have the...

catalog:read
databricks_secrets_uc_list_secretsREAD

Lists secrets in Unity Catalog. You must be a metastore admin, the owner of the secret, or have the **MANAGE** privilege on the secret. Both **catalog_name** and **schema_name** must be specified together to filter secrets within a specific schema. Results...

catalog:read
databricks_secrets_uc_update_secretWRITE

Updates an existing secret in Unity Catalog. You must be the owner of the secret or a metastore admin. If you are a metastore admin, only the **owner** field can be changed. Use the **update_mask** field to specify which fields to update. Supported...

catalog:write
databricks_service_principals_createWRITE

Creates a new service principal in the Databricks workspace.

iam:write
databricks_service_principals_deleteWRITE

DESTRUCTIVE - Delete a single service principal in the Databricks workspace.

iam:write
databricks_service_principals_getREAD

Gets the details for a single service principal define in the Databricks workspace.

iam:read
databricks_service_principals_listREAD

Gets the set of service principals associated with a Databricks workspace.

iam:read
databricks_service_principals_patchWRITE

Partially updates the details of a single service principal in the Databricks workspace.

iam:write
databricks_service_principals_updateWRITE

Updates the details of a single service principal. This action replaces the existing service principal with the same name.

iam:write
databricks_service_principals_v2_createWRITE

Creates a new service principal in the Databricks workspace.

iam:write
databricks_service_principals_v2_deleteWRITE

DESTRUCTIVE - Delete a single service principal in the Databricks workspace.

iam:write
databricks_service_principals_v2_getREAD

Gets the details for a single service principal define in the Databricks workspace.

iam:read
databricks_service_principals_v2_listREAD

Gets the set of service principals associated with a Databricks workspace.

iam:read
databricks_service_principals_v2_patchWRITE

Partially updates the details of a single service principal in the Databricks workspace.

iam:write
databricks_service_principals_v2_updateWRITE

Updates the details of a single service principal. This action replaces the existing service principal with the same name.

iam:write
databricks_serving_endpoints_build_logsREAD

Retrieves the build logs associated with the provided served model.

ml:read
databricks_serving_endpoints_createWRITE

Create a new serving endpoint. POST /api/2.0/serving-endpoints on Databricks. Requires name.

ml:write
databricks_serving_endpoints_create_provisioned_throughput_endpointWRITE

Create a new PT serving endpoint. POST /api/2.0/serving-endpoints/pt on Databricks. Requires name, config.

ml:write
databricks_serving_endpoints_deleteWRITE

DESTRUCTIVE - Delete a serving endpoint.

ml:write
databricks_serving_endpoints_export_metricsREAD

Retrieves the metrics associated with the provided serving endpoint in either Prometheus or OpenMetrics exposition format.

ml:read
databricks_serving_endpoints_getREAD

Retrieves the details for a single serving endpoint.

ml:read
databricks_serving_endpoints_get_open_apiREAD

Get the query schema of the serving endpoint in OpenAPI format. The schema contains information for the supported paths, input and output format and datatypes.

ml:read
databricks_serving_endpoints_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

ml:read
databricks_serving_endpoints_get_permissionsREAD

Gets the permissions of a serving endpoint. Serving endpoints can inherit permissions from their root object.

ml:read
databricks_serving_endpoints_http_requestWRITE

Make external services call using the credentials stored in UC Connection.

ml:write
databricks_serving_endpoints_listREAD

Get all serving endpoints. GET /api/2.0/serving-endpoints on Databricks.

ml:read
databricks_serving_endpoints_logsREAD

Retrieves the service logs associated with the provided served model.

ml:read
databricks_serving_endpoints_patchWRITE

Used to batch add and delete tags from a serving endpoint with a single API call.

ml:write
databricks_serving_endpoints_patch_system_metrics_export_stateWRITE

Updates the system-metrics-export state of a serving endpoint, independently of the endpoint config (does not trigger a config-version change or redeployment).

ml:write
databricks_serving_endpoints_patch_telemetry_configWRITE

Updates the telemetry configuration of a serving endpoint.

ml:write
databricks_serving_endpoints_putWRITE

Deprecated: Please use AI Gateway to manage rate limits instead.

ml:write
databricks_serving_endpoints_put_ai_gatewayWRITE

Used to update the AI Gateway of a serving endpoint. NOTE: External model, provisioned throughput, and pay-per-token endpoints are fully supported; agent endpoints currently only support inference tables.

ml:write
databricks_serving_endpoints_queryWRITE

Query a serving endpoint. POST /serving-endpoints/{name}/invocations on Databricks. Requires name.

ml:write
databricks_serving_endpoints_update_configWRITE

Updates any combination of the serving endpoint's served entities, the compute configuration of those served entities, and the endpoint's traffic config. An endpoint that already has an update in progress can not be updated until the current update...

ml:write
databricks_serving_endpoints_update_notificationsWRITE

Updates the email and webhook notification settings for an endpoint.

ml:write
databricks_serving_endpoints_update_provisioned_throughput_endpoint_configWRITE

Updates any combination of the pt endpoint's served entities, the compute configuration of those served entities, and the endpoint's traffic config. Updates are instantaneous and endpoint should be updated instantly

ml:write
databricks_shares_createWRITE

Creates a new share for data objects. Data objects can be added after creation with **update**. The caller must be a metastore admin or have the **CREATE_SHARE** privilege on the metastore.

catalog:write
databricks_shares_deleteWRITE

DESTRUCTIVE - Deletes a data object share from the metastore. The caller must be an owner of the share.

catalog:write
databricks_shares_getREAD

Gets a data object share from the metastore. The caller must have the USE_SHARE privilege on the metastore or be the owner of the share.

catalog:read
databricks_shares_list_sharesREAD

Gets an array of data object shares from the metastore. If the caller has the USE_SHARE privilege on the metastore, all shares are returned. Otherwise, only shares owned by the caller are returned. There is no guarantee of a specific ordering of the...

catalog:read
databricks_shares_share_permissionsREAD

Gets the permissions for a data share from the metastore. The caller must have the USE_SHARE privilege on the metastore or be the owner of the share.

catalog:read
databricks_shares_updateWRITE

Updates the share with the changes and data objects in the request. The caller must be the owner of the share or a metastore admin. When the caller is a metastore admin, only the **owner** field can be updated. In the case the share name is changed...

catalog:write
databricks_sql_results_download_deleteWRITE

DESTRUCTIVE - Reverts the SQL Results Download setting to its default value.

settings:write
databricks_sql_results_download_getREAD

Gets the SQL Results Download setting. GET /api/2.0/settings/types/sql_results_download/names/default on Databricks.

settings:read
databricks_sql_results_download_updateWRITE

Updates the SQL Results Download setting.

settings:write
databricks_statement_execution_cancel_executionWRITE

DESTRUCTIVE - Requests that an executing statement be canceled. Callers must poll for status to see the terminal state. Cancel response is empty; receiving response indicates successful receipt.

sql:write
databricks_statement_execution_execute_statementWRITE

Execute a SQL statement and optionally await its results for a specified time. **Use case: small result sets with INLINE + JSON_ARRAY** For flows that generate small and predictable result sets ( `__. StatementResponse contains ``statement_id`` and...

sql:write
databricks_statement_execution_get_statementREAD

This request can be used to poll for the statement's status. StatementResponse contains ``statement_id`` and ``status``; other fields might be absent or present depending on context. When the ``status.state`` field is ``SUCCEEDED`` it will also return the...

sql:read
databricks_statement_execution_get_statement_result_chunk_nREAD

After the statement execution has ``SUCCEEDED``, this request can be used to fetch any chunk by index. Whereas the first chunk with ``chunk_index=0`` is typically fetched with :method:statementexecution/executeStatement or...

sql:read
databricks_storage_credentials_createWRITE

Creates a new storage credential. The caller must be a metastore admin or have the **CREATE_STORAGE_CREDENTIAL** privilege on the metastore.

catalog:write
databricks_storage_credentials_deleteWRITE

DESTRUCTIVE - Deletes a storage credential from the metastore. The caller must be an owner of the storage credential.

catalog:write
databricks_storage_credentials_getREAD

Gets a storage credential from the metastore. The caller must be a metastore admin, the owner of the storage credential, or have some permission on the storage credential.

catalog:read
databricks_storage_credentials_listREAD

Gets an array of storage credentials (as **StorageCredentialInfo** objects). The array is limited to only those storage credentials the caller has permission to access. If the caller is a metastore admin, retrieval of credentials is unrestricted. There is...

catalog:read
databricks_storage_credentials_updateWRITE

Updates a storage credential on the metastore. The caller must be the owner of the storage credential or a metastore admin. If the caller is a metastore admin, only the **owner** field can be changed.

catalog:write
databricks_storage_credentials_validateWRITE

Validates a storage credential. At least one of **external_location_name** and **url** need to be provided. If only one of them is provided, it will be used for validation. And if both are provided, the **url** will be used for validation, and...

catalog:write
databricks_supervisor_agents_create_exampleWRITE

Creates an example for a Supervisor Agent.

ml:write
databricks_supervisor_agents_create_supervisor_agentWRITE

Creates a new Supervisor Agent. POST /api/2.1/supervisor-agents on Databricks.

ml:write
databricks_supervisor_agents_create_toolWRITE

Creates a Tool under a Supervisor Agent. Specify one of "genie_space", "knowledge_assistant", "uc_function", "uc_connection", "app", "volume", "dashboard", "table", "vector_search_index", "catalog", "schema", "supervisor_agent", "databricks_web_search"...

ml:write
databricks_supervisor_agents_delete_exampleWRITE

DESTRUCTIVE - Deletes an example from a Supervisor Agent.

ml:write
databricks_supervisor_agents_delete_supervisor_agentWRITE

DESTRUCTIVE - Deletes a Supervisor Agent.

ml:write
databricks_supervisor_agents_delete_toolWRITE

DESTRUCTIVE — Deletes a Tool. DELETE /api/2.1/{name} on Databricks. Requires name.

ml:write
databricks_supervisor_agents_get_exampleREAD

Gets an example from a Supervisor Agent.

ml:read
databricks_supervisor_agents_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

ml:read
databricks_supervisor_agents_get_permissionsREAD

Gets the permissions of a supervisor agent. Supervisor agents can inherit permissions from their root object.

ml:read
databricks_supervisor_agents_get_supervisor_agentREAD

Gets a Supervisor Agent. GET /api/2.1/{name} on Databricks. Requires name.

ml:read
databricks_supervisor_agents_get_toolREAD

Gets a Tool. GET /api/2.1/{name} on Databricks. Requires name.

ml:read
databricks_supervisor_agents_list_examplesREAD

Lists examples under a Supervisor Agent.

ml:read
databricks_supervisor_agents_list_supervisor_agentsREAD

Lists Supervisor Agents. GET /api/2.1/supervisor-agents on Databricks.

ml:read
databricks_supervisor_agents_list_toolsREAD

Lists Tools under a Supervisor Agent. GET /api/2.1/{parent}/tools on Databricks. Requires parent.

ml:read
databricks_supervisor_agents_update_exampleWRITE

Updates an example in a Supervisor Agent.

ml:write
databricks_supervisor_agents_update_supervisor_agentWRITE

Updates a Supervisor Agent. The fields that are required depend on the paths specified in ``update_mask``. Only fields included in the mask will be updated.

ml:write
databricks_supervisor_agents_update_toolWRITE

Updates a Tool. Only the ``description`` field can be updated. To change immutable fields such as tool type, spec, or tool ID, delete the tool and recreate it.

ml:write
databricks_system_schemas_disableWRITE

DESTRUCTIVE - Disables the system schema and removes it from the system catalog. The caller must be an account admin or a metastore admin.

catalog:write
databricks_system_schemas_enableWRITE

Enables the system schema and adds it to the system catalog. The caller must be an account admin or a metastore admin.

catalog:write
databricks_system_schemas_listREAD

Gets an array of system schemas for a metastore. The caller must be an account admin or a metastore admin. NOTE: we recommend using max_results=0 to use the paginated version of this API. Unpaginated calls will be deprecated soon. PAGINATION BEHAVIOR: When...

catalog:read
databricks_table_constraints_createWRITE

Creates a new table constraint. For the table constraint creation to succeed, the user must satisfy both of these conditions: - the user must have the **USE_CATALOG** privilege on the table's parent catalog, the **USE_SCHEMA** privilege on the table's...

catalog:write
databricks_table_constraints_deleteWRITE

DESTRUCTIVE - Deletes a table constraint. For the table constraint deletion to succeed, the user must satisfy both of these conditions: - the user must have the **USE_CATALOG** privilege on the table's parent catalog, the **USE_SCHEMA** privilege on the...

catalog:write
databricks_tables_createWRITE

Creates a new table in the specified catalog and schema. To create an external delta table, the caller must have the **EXTERNAL_USE_SCHEMA** privilege on the parent schema and the **EXTERNAL_USE_LOCATION** privilege on the external location. These...

catalog:write
databricks_tables_deleteWRITE

DESTRUCTIVE - Deletes a table from the specified parent catalog and schema. The caller must be the owner of the parent catalog, have the **USE_CATALOG** privilege on the parent catalog and be the owner of the parent schema, or be the owner of the table and...

catalog:write
databricks_tables_existsREAD

Gets if a table exists in the metastore for a specific catalog and schema. The caller must satisfy one of the following requirements: - Be a metastore admin - Be the owner of the parent catalog - Be the owner of the parent schema and have the...

catalog:read
databricks_tables_getREAD

Gets a table from the metastore for a specific catalog and schema. The caller must satisfy one of the following requirements: - Be a metastore admin - Be the owner of the parent catalog - Be the owner of the parent schema and have the **USE_CATALOG**...

catalog:read
databricks_tables_listREAD

Gets an array of all tables for the current metastore under the parent catalog and schema. The caller must be a metastore admin or an owner of (or have the **SELECT** privilege on) the table. For the latter case, the caller must also be the owner or have...

catalog:read
databricks_tables_list_summariesREAD

Gets an array of summaries for tables for a schema and catalog within the metastore. The table summaries returned are either: - summaries for tables (within the current metastore and parent catalog and schema), when the user is a metastore admin, or: -...

catalog:read
databricks_tables_updateWRITE

Change the owner of the table. The caller must be the owner of the parent catalog, have the **USE_CATALOG** privilege on the parent catalog and be the owner of the parent schema, or be the owner of the table and have the **USE_CATALOG** privilege on the...

catalog:write
databricks_tag_policies_create_tag_policyWRITE

Creates a new tag policy, making the associated tag key governed. For Terraform usage, see the `Tag Policy Terraform documentation `__. To manage permissions for tag policies, use the `Account Access Control Proxy API `__.

catalog:write
databricks_tag_policies_delete_tag_policyWRITE

DESTRUCTIVE - Deletes a tag policy by its associated governed tag's key, leaving that tag key ungoverned. For Terraform usage, see the `Tag Policy Terraform documentation `__.

catalog:write
databricks_tag_policies_get_tag_policyREAD

Gets a single tag policy by its associated governed tag's key. For Terraform usage, see the `Tag Policy Terraform documentation `__. To list granted permissions for tag policies, use the `Account Access Control Proxy API `__.

catalog:read
databricks_tag_policies_list_tag_policiesREAD

Lists the tag policies for all governed tags in the account. For Terraform usage, see the `Tag Policy Terraform documentation `__. To list granted permissions for tag policies, use the `Account Access Control Proxy API `__.

catalog:read
databricks_tag_policies_update_tag_policyWRITE

Updates an existing tag policy for a single governed tag. For Terraform usage, see the `Tag Policy Terraform documentation `__. To manage permissions for tag policies, use the `Account Access Control Proxy API `__.

catalog:write
databricks_temporary_path_credentials_generate_temporary_path_credentialsWRITE

Get a short-lived credential for directly accessing cloud storage locations registered in Databricks. The Generate Temporary Path Credentials API is only supported for external storage paths, specifically external locations and external tables. Managed...

catalog:write
databricks_temporary_table_credentials_generate_temporary_table_credentialsWRITE

Get a short-lived credential for directly accessing the table data on cloud storage. The metastore must have **external_access_enabled** flag set to true (default false). The caller must have the **EXTERNAL_USE_SCHEMA** privilege on the parent schema and...

catalog:write
databricks_temporary_volume_credentials_generate_temporary_volume_credentialsWRITE

Get a short-lived credential for directly accessing the volume data on cloud storage. The metastore must have **external_access_enabled** flag set to true (default false). The caller must have the **EXTERNAL_USE_SCHEMA** privilege on the parent schema and...

catalog:write
databricks_token_management_deleteWRITE

DESTRUCTIVE - Deletes a token, specified by its ID.

settings:write
databricks_token_management_getREAD

Gets information about a token, specified by its ID.

settings:read
databricks_token_management_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

settings:read
databricks_token_management_get_permissionsREAD

Gets the permissions of all tokens. Tokens can inherit permissions from their root object.

settings:read
databricks_token_management_listREAD

Lists all tokens associated with the specified workspace or user.

settings:read
databricks_token_management_update_token_managementWRITE

Updates a token, specified by its ID. PATCH /api/2.0/token-management/tokens/{token_id} on Databricks. Requires token_id, token, update_mask.

settings:write
databricks_tokens_deleteWRITE

DESTRUCTIVE - Revokes an access token. If a token with the specified ID is not valid, this call returns an error **RESOURCE_DOES_NOT_EXIST**.

settings:write
databricks_tokens_listREAD

Lists all the valid tokens for a user-workspace pair.

settings:read
databricks_tokens_updateWRITE

Updates the comment or scopes of a token. If a token with the specified ID is not valid, this call returns an error **NOT_FOUND**.

settings:write
databricks_users_createWRITE

Creates a new user in the Databricks workspace. This new user will also be added to the Databricks account.

iam:write
databricks_users_deleteWRITE

DESTRUCTIVE - Deletes a user. Deleting a user from a Databricks workspace also removes objects associated with the user.

iam:write
databricks_users_getREAD

Gets information for a specific user in Databricks workspace.

iam:read
databricks_users_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

iam:read
databricks_users_get_permissionsREAD

Gets the permissions of all passwords. Passwords can inherit permissions from their root object.

iam:read
databricks_users_listREAD

Gets details for all the users associated with a Databricks workspace.

iam:read
databricks_users_patchWRITE

Partially updates a user resource by applying the supplied operations on specific user attributes.

iam:write
databricks_users_updateWRITE

Replaces a user's information with the data supplied in request.

iam:write
databricks_users_v2_createWRITE

Creates a new user in the Databricks workspace. This new user will also be added to the Databricks account.

iam:write
databricks_users_v2_deleteWRITE

DESTRUCTIVE - Deletes a user. Deleting a user from a Databricks workspace also removes objects associated with the user.

iam:write
databricks_users_v2_getREAD

Gets information for a specific user in Databricks workspace.

iam:read
databricks_users_v2_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

iam:read
databricks_users_v2_get_permissionsREAD

Gets the permissions of all passwords. Passwords can inherit permissions from their root object.

iam:read
databricks_users_v2_listREAD

Gets details for all the users associated with a Databricks workspace.

iam:read
databricks_users_v2_patchWRITE

Partially updates a user resource by applying the supplied operations on specific user attributes. The ``userName`` and ``emails`` attributes cannot be updated through this API; any supplied changes to them are ignored (no-op).

iam:write
databricks_users_v2_updateWRITE

Replaces a user's information with the data supplied in request. The ``userName`` and ``emails`` attributes cannot be updated through this API; any supplied changes to them are ignored (no-op).

iam:write
databricks_vector_search_endpoints_create_endpointWRITE

Create a new endpoint. POST /api/2.0/vector-search/endpoints on Databricks. Requires name, endpoint_type.

ml:write
databricks_vector_search_endpoints_delete_endpointWRITE

DESTRUCTIVE - Delete an AI Search endpoint.

ml:write
databricks_vector_search_endpoints_get_endpointREAD

Get details for a single AI Search endpoint.

ml:read
databricks_vector_search_endpoints_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

ml:read
databricks_vector_search_endpoints_get_permissionsREAD

Gets the permissions of a vector search endpoint. Vector search endpoints can inherit permissions from their root object.

ml:read
databricks_vector_search_endpoints_list_endpointsREAD

List all AI Search endpoints in the workspace.

ml:read
databricks_vector_search_endpoints_patch_endpointWRITE

Update an endpoint. PATCH /api/2.0/vector-search/endpoints/{endpoint_name} on Databricks. Requires endpoint_name.

ml:write
databricks_vector_search_endpoints_patch_endpoint_throughputWRITE

Update the throughput (concurrency) of an endpoint

ml:write
databricks_vector_search_endpoints_retrieve_user_visible_metricsWRITE

Retrieve user-visible metrics for an endpoint

ml:write
databricks_vector_search_endpoints_update_endpoint_budget_policyWRITE

Update the budget policy of an endpoint. PATCH /api/2.0/vector-search/endpoints/{endpoint_name}/budget-policy on Databricks. Requires endpoint_name, budget_policy_id.

ml:write
databricks_vector_search_endpoints_update_endpoint_custom_tagsWRITE

Update the custom tags of an endpoint. PATCH /api/2.0/vector-search/endpoints/{endpoint_name}/tags on Databricks. Requires endpoint_name, custom_tags.

ml:write
databricks_vector_search_indexes_create_indexWRITE

Create a new index. POST /api/2.0/vector-search/indexes on Databricks. Requires name, endpoint_name, primary_key, index_type.

ml:write
databricks_vector_search_indexes_delete_data_vector_indexWRITE

DESTRUCTIVE - Handles the deletion of data from a specified vector index.

ml:write
databricks_vector_search_indexes_delete_indexWRITE

DESTRUCTIVE — Delete an index. DELETE /api/2.0/vector-search/indexes/{index_name} on Databricks. Requires index_name.

ml:write
databricks_vector_search_indexes_get_auto_eval_statusREAD

Returns the status of the latest autoeval run for a vector index.

ml:read
databricks_vector_search_indexes_get_indexREAD

Get an index. GET /api/2.0/vector-search/indexes/{index_name} on Databricks. Requires index_name.

ml:read
databricks_vector_search_indexes_list_indexesREAD

List all indexes in the given endpoint. GET /api/2.0/vector-search/indexes on Databricks. Requires endpoint_name.

ml:read
databricks_vector_search_indexes_query_indexWRITE

Query the specified vector index. POST /api/2.0/vector-search/indexes/{index_name}/query on Databricks. Requires index_name, columns.

ml:write
databricks_vector_search_indexes_query_next_pageWRITE

Use ``next_page_token`` returned from previous ``QueryVectorIndex`` or ``QueryVectorIndexNextPage`` request to fetch next page of results.

ml:write
databricks_vector_search_indexes_run_auto_evalWRITE

Triggers an autoeval quality evaluation for a vector index.

ml:write
databricks_vector_search_indexes_run_reranker_finetuningWRITE

Triggers reranker finetuning for a vector index.

ml:write
databricks_vector_search_indexes_scan_indexWRITE

Scan the specified vector index and return the first ``num_results`` entries after the exclusive ``primary_key``.

ml:write
databricks_vector_search_indexes_sync_indexWRITE

Triggers a synchronization process for a specified vector index.

ml:write
databricks_vector_search_indexes_update_index_budget_policyWRITE

Update the budget policy of an index. PATCH /api/2.0/vector-search/indexes/{index_name}/usage-policy on Databricks. Requires index_name.

ml:write
databricks_vector_search_indexes_upsert_data_vector_indexWRITE

Handles the upserting of data into a specified vector index.

ml:write
databricks_volumes_createWRITE

Creates a new volume. The user could create either an external volume or a managed volume. An external volume will be created in the specified external location, while a managed volume will be located in the default location which is specified by the parent...

catalog:write
databricks_volumes_deleteWRITE

DESTRUCTIVE - Deletes a volume from the specified parent catalog and schema. The caller must be a metastore admin or an owner of the volume. For the latter case, the caller must also be the owner or have the **USE_CATALOG** privilege on the parent catalog and...

catalog:write
databricks_volumes_listREAD

Gets an array of volumes for the current metastore under the parent catalog and schema. The returned volumes are filtered based on the privileges of the calling user. For example, the metastore admin is able to list all the volumes. A regular user needs to...

catalog:read
databricks_volumes_readREAD

Gets a volume from the metastore for a specific catalog and schema. The caller must be a metastore admin or an owner of (or have the **READ VOLUME** privilege on) the volume. For the latter case, the caller must also be the owner or have the **USE_CATALOG**...

catalog:read
databricks_volumes_updateWRITE

Updates the specified volume under the specified parent catalog and schema. The caller must be a metastore admin or an owner of the volume. For the latter case, the caller must also be the owner or have the **USE_CATALOG** privilege on the parent catalog...

catalog:write
databricks_warehouses_createWRITE

Creates a new SQL warehouse. POST /api/2.0/sql/warehouses on Databricks.

sql:write
databricks_warehouses_create_default_warehouse_overrideWRITE

Creates a new default warehouse override for a user. Users can create their own override. Admins can create overrides for any user.

sql:write
databricks_warehouses_deleteWRITE

DESTRUCTIVE — Deletes a SQL warehouse. DELETE /api/2.0/sql/warehouses/{id} on Databricks. Requires id.

sql:write
databricks_warehouses_delete_default_warehouse_overrideWRITE

DESTRUCTIVE - Deletes the default warehouse override for a user. Users can delete their own override. Admins can delete overrides for any user. After deletion, the workspace default warehouse will be used.

sql:write
databricks_warehouses_editWRITE

Updates the configuration for a SQL warehouse.

sql:write
databricks_warehouses_getREAD

Gets the information for a single SQL warehouse.

sql:read
databricks_warehouses_get_default_warehouse_overrideREAD

Returns the default warehouse override for a user. Users can fetch their own override. Admins can fetch overrides for any user. If no override exists, the UI will fallback to the workspace default warehouse.

sql:read
databricks_warehouses_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

sql:read
databricks_warehouses_get_permissionsREAD

Gets the permissions of a SQL warehouse. SQL warehouses can inherit permissions from their root object.

sql:read
databricks_warehouses_get_workspace_warehouse_configREAD

Gets the workspace level configuration that is shared by all SQL warehouses in a workspace.

sql:read
databricks_warehouses_listREAD

Lists all SQL warehouses that a user has access to.

sql:read
databricks_warehouses_list_default_warehouse_overridesREAD

Lists all default warehouse overrides in the workspace. Only workspace administrators can list all overrides.

sql:read
databricks_warehouses_set_workspace_warehouse_configWRITE

Sets the workspace level configuration that is shared by all SQL warehouses in a workspace.

sql:write
databricks_warehouses_startWRITE

Starts a SQL warehouse. POST /api/2.0/sql/warehouses/{id}/start on Databricks. Requires id.

sql:write
databricks_warehouses_stopWRITE

Stops a SQL warehouse. POST /api/2.0/sql/warehouses/{id}/stop on Databricks. Requires id.

sql:write
databricks_warehouses_update_default_warehouse_overrideWRITE

Updates an existing default warehouse override for a user. Users can update their own override. Admins can update overrides for any user.

sql:write
databricks_workspace_bindings_getREAD

Gets workspace bindings of the catalog. The caller must be a metastore admin or an owner of the catalog.

catalog:read
databricks_workspace_bindings_get_bindingsREAD

Gets workspace bindings of the securable. The caller must be a metastore admin or an owner of the securable. NOTE: we recommend using max_results=0 to use the paginated version of this API. Unpaginated calls will be deprecated soon. PAGINATION BEHAVIOR...

catalog:read
databricks_workspace_bindings_updateWRITE

Updates workspace bindings of the catalog. The caller must be a metastore admin or an owner of the catalog.

catalog:write
databricks_workspace_bindings_update_bindingsWRITE

Updates workspace bindings of the securable. The caller must be a metastore admin or an owner of the securable.

catalog:write
databricks_workspace_conf_get_statusREAD

Gets the configuration status for a workspace.

settings:read
databricks_workspace_conf_set_statusWRITE

Sets the configuration status for a workspace, including enabling or disabling it.

settings:write
databricks_workspace_deleteWRITE

DESTRUCTIVE - Deletes an object or a directory (and optionally recursively deletes all objects in the directory). - If ``path`` does not exist, this call returns an error ``RESOURCE_DOES_NOT_EXIST``. - If ``path`` is a non-empty directory and ``recursive`` is...

workspace:write
databricks_workspace_entity_tag_assignments_create_tag_assignmentWRITE

Create a tag assignment. POST /api/2.0/entity-tag-assignments on Databricks.

catalog:write
databricks_workspace_entity_tag_assignments_delete_tag_assignmentWRITE

DESTRUCTIVE — Delete a tag assignment. DELETE /api/2.0/entity-tag-assignments/{entity_type}/{entity_id}/tags/{tag_key} on Databricks. Requires entity_type, entity_id, tag_key.

catalog:write
databricks_workspace_entity_tag_assignments_get_tag_assignmentREAD

Get a tag assignment. GET /api/2.0/entity-tag-assignments/{entity_type}/{entity_id}/tags/{tag_key} on Databricks. Requires entity_type, entity_id, tag_key.

catalog:read
databricks_workspace_entity_tag_assignments_list_tag_assignmentsREAD

List the tag assignments for an entity. GET /api/2.0/entity-tag-assignments/{entity_type}/{entity_id}/tags on Databricks. Requires entity_type, entity_id.

catalog:read
databricks_workspace_entity_tag_assignments_update_tag_assignmentWRITE

Update a tag assignment. PATCH /api/2.0/entity-tag-assignments/{entity_type}/{entity_id}/tags/{tag_key} on Databricks. Requires entity_type, entity_id, tag_key, update_mask.

catalog:write
databricks_workspace_exportREAD

Exports an object or the contents of an entire directory. If ``path`` does not exist, this call returns an error ``RESOURCE_DOES_NOT_EXIST``. If the exported data would exceed size limit, this call returns ``MAX_NOTEBOOK_SIZE_EXCEEDED``. Currently, this API...

workspace:read
databricks_workspace_get_permission_levelsREAD

Gets the permission levels that a user can have on an object.

workspace:read
databricks_workspace_get_permissionsREAD

Gets the permissions of a workspace object. Workspace objects can inherit permissions from their parent objects or root object.

workspace:read
databricks_workspace_get_statusREAD

Gets the status of an object or a directory. If ``path`` does not exist, this call returns an error ``RESOURCE_DOES_NOT_EXIST``.

workspace:read
databricks_workspace_iam_v2_create_direct_group_member_proxyWRITE

Creates a group membership (assigns a principal to a group).

iam:write
databricks_workspace_iam_v2_create_group_proxyWRITE

Creates a local group in the Databricks account that parents the calling workspace and returns the created group. A local group is one that is not synced from the customer's identity provider, and can be created whether or not Account Identity Management...

iam:write
databricks_workspace_iam_v2_create_service_principal_proxyWRITE

Creates a local service principal in the Databricks account that parents the calling workspace and returns the created service principal. A local service principal is one that is not synced from the customer's identity provider, and can be created whether...

iam:write
databricks_workspace_iam_v2_create_user_proxyWRITE

Creates a local user in the Databricks account that parents the calling workspace and returns the created user. A local user is one that is not synced from the customer's identity provider, and can be created whether or not Account Identity Management (AIM)...

iam:write
databricks_workspace_iam_v2_create_workspace_assignment_detail_proxyWRITE

Creates a workspace assignment detail for a principal in the calling workspace. Entitlements are granted one at a time rather than atomically. If the request fails partway through, the principal stays assigned to the workspace with only some of the...

iam:write
databricks_workspace_iam_v2_create_workspace_assignment_proxyWRITE

Creates a workspace assignment for a principal in the calling workspace. Entitlements are granted one at a time rather than atomically. If the request fails partway through, the principal stays assigned to the workspace with only some of the requested...

iam:write
databricks_workspace_iam_v2_delete_direct_group_member_proxyWRITE

DESTRUCTIVE - Deletes a group membership (unassigns a principal from a group).

iam:write
databricks_workspace_iam_v2_delete_group_proxyWRITE

DESTRUCTIVE - Deletes a group by its internal ID from the Databricks account that parents the calling workspace.

iam:write
databricks_workspace_iam_v2_delete_service_principal_proxyWRITE

DESTRUCTIVE - Deletes a service principal by its internal ID from the Databricks account that parents the calling workspace.

iam:write
databricks_workspace_iam_v2_delete_user_proxyWRITE

DESTRUCTIVE - Deletes a user by its internal ID from the Databricks account that parents the calling workspace.

iam:write
databricks_workspace_iam_v2_delete_workspace_assignment_detail_proxyWRITE

DESTRUCTIVE - Deletes a workspace assignment detail for a principal in the calling workspace, revoking all of its entitlements. Entitlements are revoked one at a time rather than atomically. If the request fails partway through, the principal stays assigned...

iam:write
databricks_workspace_iam_v2_delete_workspace_assignment_proxyWRITE

DESTRUCTIVE - Deletes a workspace assignment for a principal in the calling workspace, revoking all of its entitlements. Entitlements are revoked one at a time rather than atomically. If the request fails partway through, the principal stays assigned with...

iam:write
databricks_workspace_iam_v2_get_direct_group_member_proxyREAD

Gets a provisioned direct member of a group.

iam:read
databricks_workspace_iam_v2_get_external_group_proxyREAD

Retrieves an external group with the given external ID from the customer's IdP. If the group does not exist, it will be created in the account. If the customer is not onboarded onto Automatic Identity Management (AIM), this will return an error...

iam:read
databricks_workspace_iam_v2_get_external_service_principal_proxyREAD

Retrieves an external service principal with the given external ID from the customer's IdP. If the service principal does not exist, it will be created. If the customer is not onboarded onto Automatic Identity Management (AIM), this will return an error...

iam:read
databricks_workspace_iam_v2_get_external_user_proxyREAD

Retrieves an external user with the given external ID from the customer's IdP. If the user does not exist, it will be created. If the customer is not onboarded onto Automatic Identity Management (AIM), this will return an error. Workspace-scoped variant for...

iam:read
databricks_workspace_iam_v2_get_group_proxyREAD

Fetches a group by its internal ID from the Databricks account that parents the calling workspace.

iam:read
databricks_workspace_iam_v2_get_service_principal_proxyREAD

Fetches a service principal by its internal ID from the Databricks account that parents the calling workspace.

iam:read
databricks_workspace_iam_v2_get_user_proxyREAD

Fetches a user by its internal ID from the Databricks account that parents the calling workspace.

iam:read
databricks_workspace_iam_v2_get_workspace_access_detail_localREAD

Returns the access details for a principal in the current workspace. Allows for checking access details for any provisioned principal (user, service principal, or group) in the current workspace. - Provisioned principal here refers to one that has been...

iam:read
databricks_workspace_iam_v2_get_workspace_assignment_detail_proxyREAD

Returns the assignment details for a principal in the calling workspace.

iam:read
databricks_workspace_iam_v2_get_workspace_assignment_proxyREAD

Returns the assignment for a principal in the calling workspace.

iam:read
databricks_workspace_iam_v2_get_workspace_identity_detailREAD

Returns the identity details for a principal in a workspace.

iam:read
databricks_workspace_iam_v2_list_direct_group_members_proxyREAD

Lists provisioned direct members of a group with their membership source (internal or from identity provider).

iam:read
databricks_workspace_iam_v2_list_groups_proxyREAD

Lists the groups in the Databricks account that parents the calling workspace, returning one page per call. Supports filtering by group name or external ID.

iam:read
databricks_workspace_iam_v2_list_service_principals_proxyREAD

Lists the service principals in the Databricks account that parents the calling workspace, returning one page per call. Supports filtering by application ID or external ID.

iam:read
databricks_workspace_iam_v2_list_transitive_parent_groups_proxyREAD

Lists all transitive parent groups of a principal.

iam:read
databricks_workspace_iam_v2_list_users_proxyREAD

Lists the users in the Databricks account that parents the calling workspace, returning one page per call. Supports filtering by username or external ID.

iam:read
databricks_workspace_iam_v2_list_workspace_access_details_localREAD

Lists the access details of every provisioned principal (user, service principal, or group) with access to the current workspace, returning one page per call. - Provisioned principal here refers to one that has been synced into Databricks from the...

iam:read
databricks_workspace_iam_v2_list_workspace_assignment_details_proxyREAD

Lists workspace assignment details for the calling workspace. The response omits the per-principal entitlement fields (``entitlements`` and ``effective_entitlements``). To read the entitlements for a single principal, get that principal's assignment detail.

iam:read
databricks_workspace_iam_v2_list_workspace_assignments_proxyREAD

Lists workspace assignments for the calling workspace. The response omits the per-principal entitlement fields (``entitlements`` and ``effective_entitlements``). To read the entitlements for a single principal, get that principal's assignment.

iam:read
databricks_workspace_iam_v2_resolve_group_proxyWRITE

Resolves a group with the given external ID from the customer's IdP. If the group does not exist, it will be created in the account. If the customer is not onboarded onto Automatic Identity Management (AIM), this will return an error.

iam:write
databricks_workspace_iam_v2_resolve_service_principal_proxyWRITE

Resolves a service principal with the given external ID from the customer's IdP. If the service principal does not exist, it will be created. If the customer is not onboarded onto Automatic Identity Management (AIM), this will return an error.

iam:write
databricks_workspace_iam_v2_resolve_user_proxyWRITE

Resolves a user with the given external ID from the customer's IdP. If the user does not exist, it will be created. If the customer is not onboarded onto Automatic Identity Management (AIM), this will return an error.

iam:write
databricks_workspace_iam_v2_update_group_proxyWRITE

Updates an existing group in the Databricks account that parents the calling workspace. Only the fields named in the update mask are modified. Returns the updated Group resource. When AIM is enabled and the group is an external identity (its external_id is...

iam:write
databricks_workspace_iam_v2_update_service_principal_proxyWRITE

Updates an existing service principal in the Databricks account that parents the calling workspace. Only the fields named in the update mask are modified. Returns the updated ServicePrincipal resource. When AIM is enabled and the service principal is an...

iam:write
databricks_workspace_iam_v2_update_user_proxyWRITE

Updates an existing user in the Databricks account that parents the calling workspace and returns the updated user. Only the fields named in the update mask are modified. The updatable fields are fullName.givenName, fullName.familyName, status, and...

iam:write
databricks_workspace_iam_v2_update_workspace_assignment_detail_proxyWRITE

Updates the entitlements of a directly assigned principal in the calling workspace. Changes are applied one at a time rather than atomically. If the request fails partway through, only some of the requested changes take effect. Get the assignment detail...

iam:write
databricks_workspace_iam_v2_update_workspace_assignment_proxyWRITE

Updates the entitlements of a directly assigned principal in the calling workspace. Changes are applied one at a time rather than atomically. If the request fails partway through, only some of the requested changes take effect. Get the assignment afterwards...

iam:write
databricks_workspace_iam_v2_update_workspace_identity_detailWRITE

Updates a workspace identity detail for a principal.

iam:write
databricks_workspace_importWRITE

Imports a workspace object (for example, a notebook or file) or the contents of an entire directory. If ``path`` already exists and ``overwrite`` is set to ``false``, this call returns an error ``RESOURCE_ALREADY_EXISTS``. To import a directory, you can use...

workspace:write
databricks_workspace_listREAD

Lists the contents of a directory, or the object if it is not a directory. If the input path does not exist, this call returns an error ``RESOURCE_DOES_NOT_EXIST``.

workspace:read
databricks_workspace_mkdirsWRITE

Creates the specified directory (and necessary parent directories if they do not exist). If there is an object (not a directory) at any prefix of the input path, this call returns an error ``RESOURCE_ALREADY_EXISTS``. Note that if this operation fails it...

workspace:write
databricks_workspace_settings_v2_get_public_workspace_settingREAD

Get a setting value at workspace level. See :method:settingsv2/listworkspacesettingsmetadata for list of setting available via public APIs.

settings:read
databricks_workspace_settings_v2_list_workspace_settings_metadataREAD

List valid setting keys and metadata. These settings are available to be referenced via GET :method:settingsv2/getpublicworkspacesetting and PATCH :method:settingsv2/patchpublicworkspacesetting APIs

settings:read
databricks_workspace_settings_v2_patch_public_workspace_settingWRITE

Patch a setting value at workspace level. See :method:settingsv2/listworkspacesettingsmetadata for list of setting available via public APIs at workspace level. To determine the correct field to include in a patch request, refer to the type field of the...

settings:write

Put Databricks behind one governed endpoint.

Same permissions, same audit trail, whatever else you connect next.