Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Databricks Provider
  4. API Docs
  5. AccountIamWorkspaceAssignmentV2
Viewing docs for Databricks v1.109.0
published on Tuesday, Sep 8, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

databricks.AccountIamWorkspaceAssignmentV2

databricks logo databricks logo
Viewing docs for Databricks v1.109.0
published on Tuesday, Sep 8, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-databricks

    Public Beta

    API Documentation

    Manages the direct assignment of an account principal to a workspace, along with the entitlements that assignment grants. Creating the resource assigns the principal to the workspace; deleting it removes the assignment. entitlements is the only updatable field.

    Example Usage

    Example usage:

    Assigns a principal to a workspace with a set of entitlements. workspaceId and principalId identify the assignment; entitlements is the set granted directly on it (at least one is required). entitlements is the only updatable field — edit the list and re-apply to update in place. Changing workspaceId or principalId replaces the assignment.

    import * as pulumi from "@pulumi/pulumi";
import * as databricks from "@pulumi/databricks";

const _this = new databricks.AccountIamWorkspaceAssignmentV2("this", {
    workspaceId: "123456789",
    principalId: "987654321",
    entitlements: ["WORKSPACE_ACCESS"],
});

    import pulumi
import pulumi_databricks as databricks

this = databricks.AccountIamWorkspaceAssignmentV2("this",
    workspace_id="123456789",
    principal_id="987654321",
    entitlements=["WORKSPACE_ACCESS"])

    package main

import (
	"github.com/pulumi/pulumi-databricks/sdk/go/databricks"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := databricks.NewAccountIamWorkspaceAssignmentV2(ctx, "this", &databricks.AccountIamWorkspaceAssignmentV2Args{
			WorkspaceId: pulumi.String("123456789"),
			PrincipalId: pulumi.String("987654321"),
			Entitlements: pulumi.StringArray{
				pulumi.String("WORKSPACE_ACCESS"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Databricks = Pulumi.Databricks;

return await Deployment.RunAsync(() => 
{
    var @this = new Databricks.AccountIamWorkspaceAssignmentV2("this", new()
    {
        WorkspaceId = "123456789",
        PrincipalId = "987654321",
        Entitlements = new[]
        {
            "WORKSPACE_ACCESS",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.databricks.AccountIamWorkspaceAssignmentV2;
import com.pulumi.databricks.AccountIamWorkspaceAssignmentV2Args;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var this_ = new AccountIamWorkspaceAssignmentV2("this", AccountIamWorkspaceAssignmentV2Args.builder()
            .workspaceId("123456789")
            .principalId("987654321")
            .entitlements("WORKSPACE_ACCESS")
            .build());

    }
}

    resources:
  this:
    type: databricks:AccountIamWorkspaceAssignmentV2
    properties:
      workspaceId: 1.23456789e+08
      principalId: 9.87654321e+08
      entitlements:
        - WORKSPACE_ACCESS

    pulumi {
  required_providers {
    databricks = {
      source = "pulumi/databricks"
    }
  }
}

resource "databricks_accountiamworkspaceassignmentv2" "this" {
  workspace_id = 123456789
  principal_id = 987654321
  entitlements = ["WORKSPACE_ACCESS"]
}

    Create AccountIamWorkspaceAssignmentV2 Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AccountIamWorkspaceAssignmentV2(name: string, args: AccountIamWorkspaceAssignmentV2Args, opts?: CustomResourceOptions);
    @overload
def AccountIamWorkspaceAssignmentV2(resource_name: str,
                                    args: AccountIamWorkspaceAssignmentV2Args,
                                    opts: Optional[ResourceOptions] = None)

@overload
def AccountIamWorkspaceAssignmentV2(resource_name: str,
                                    opts: Optional[ResourceOptions] = None,
                                    principal_id: Optional[str] = None,
                                    entitlements: Optional[Sequence[str]] = None,
                                    workspace_id: Optional[str] = None)
    func NewAccountIamWorkspaceAssignmentV2(ctx *Context, name string, args AccountIamWorkspaceAssignmentV2Args, opts ...ResourceOption) (*AccountIamWorkspaceAssignmentV2, error)
    public AccountIamWorkspaceAssignmentV2(string name, AccountIamWorkspaceAssignmentV2Args args, CustomResourceOptions? opts = null)
    public AccountIamWorkspaceAssignmentV2(String name, AccountIamWorkspaceAssignmentV2Args args)
public AccountIamWorkspaceAssignmentV2(String name, AccountIamWorkspaceAssignmentV2Args args, CustomResourceOptions options)

    type: databricks:AccountIamWorkspaceAssignmentV2
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "databricks_account_iam_workspace_assignment_v2" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args AccountIamWorkspaceAssignmentV2Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AccountIamWorkspaceAssignmentV2Args
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AccountIamWorkspaceAssignmentV2Args
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AccountIamWorkspaceAssignmentV2Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AccountIamWorkspaceAssignmentV2Args
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var accountIamWorkspaceAssignmentV2Resource = new Databricks.AccountIamWorkspaceAssignmentV2("accountIamWorkspaceAssignmentV2Resource", new()
{
    PrincipalId = "string",
    Entitlements = new[]
    {
        "string",
    },
    WorkspaceId = "string",
});

    example, err := databricks.NewAccountIamWorkspaceAssignmentV2(ctx, "accountIamWorkspaceAssignmentV2Resource", &databricks.AccountIamWorkspaceAssignmentV2Args{
	PrincipalId: pulumi.String("string"),
	Entitlements: pulumi.StringArray{
		pulumi.String("string"),
	},
	WorkspaceId: pulumi.String("string"),
})

    resource "databricks_account_iam_workspace_assignment_v2" "accountIamWorkspaceAssignmentV2Resource" {
  lifecycle {
    create_before_destroy = true
  }
  principal_id = "string"
  entitlements = ["string"]
  workspace_id = "string"
}

    var accountIamWorkspaceAssignmentV2Resource = new AccountIamWorkspaceAssignmentV2("accountIamWorkspaceAssignmentV2Resource", AccountIamWorkspaceAssignmentV2Args.builder()
    .principalId("string")
    .entitlements("string")
    .workspaceId("string")
    .build());

    account_iam_workspace_assignment_v2_resource = databricks.AccountIamWorkspaceAssignmentV2("accountIamWorkspaceAssignmentV2Resource",
    principal_id="string",
    entitlements=["string"],
    workspace_id="string")

    const accountIamWorkspaceAssignmentV2Resource = new databricks.AccountIamWorkspaceAssignmentV2("accountIamWorkspaceAssignmentV2Resource", {
    principalId: "string",
    entitlements: ["string"],
    workspaceId: "string",
});

    type: databricks:AccountIamWorkspaceAssignmentV2
properties:
    entitlements:
        - string
    principalId: string
    workspaceId: string

    AccountIamWorkspaceAssignmentV2 Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AccountIamWorkspaceAssignmentV2 resource accepts the following input properties:

    PrincipalId string
    The internal ID of the principal (user/sp/group) in Databricks
    Entitlements List<string>
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    WorkspaceId string
    (integer) - The workspace ID where the principal is assigned
    PrincipalId string
    The internal ID of the principal (user/sp/group) in Databricks
    Entitlements []string
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    WorkspaceId string
    (integer) - The workspace ID where the principal is assigned
    principal_id string
    The internal ID of the principal (user/sp/group) in Databricks
    entitlements list(string)
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    workspace_id string
    (integer) - The workspace ID where the principal is assigned
    principalId String
    The internal ID of the principal (user/sp/group) in Databricks
    entitlements List<String>
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    workspaceId String
    (integer) - The workspace ID where the principal is assigned
    principalId string
    The internal ID of the principal (user/sp/group) in Databricks
    entitlements string[]
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    workspaceId string
    (integer) - The workspace ID where the principal is assigned
    principal_id str
    The internal ID of the principal (user/sp/group) in Databricks
    entitlements Sequence[str]
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    workspace_id str
    (integer) - The workspace ID where the principal is assigned
    principalId String
    The internal ID of the principal (user/sp/group) in Databricks
    entitlements List<String>
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    workspaceId String
    (integer) - The workspace ID where the principal is assigned

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AccountIamWorkspaceAssignmentV2 resource produces the following output properties:

    AccountId string
    (string) - The account ID parent of the workspace where the principal is assigned
    EffectiveEntitlements List<string>
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    Id string
    The provider-assigned unique ID for this managed resource.
    PrincipalType string
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER
    AccountId string
    (string) - The account ID parent of the workspace where the principal is assigned
    EffectiveEntitlements []string
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    Id string
    The provider-assigned unique ID for this managed resource.
    PrincipalType string
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER
    account_id string
    (string) - The account ID parent of the workspace where the principal is assigned
    effective_entitlements list(string)
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    id string
    The provider-assigned unique ID for this managed resource.
    principal_type string
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER
    accountId String
    (string) - The account ID parent of the workspace where the principal is assigned
    effectiveEntitlements List<String>
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    id String
    The provider-assigned unique ID for this managed resource.
    principalType String
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER
    accountId string
    (string) - The account ID parent of the workspace where the principal is assigned
    effectiveEntitlements string[]
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    id string
    The provider-assigned unique ID for this managed resource.
    principalType string
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER
    account_id str
    (string) - The account ID parent of the workspace where the principal is assigned
    effective_entitlements Sequence[str]
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    id str
    The provider-assigned unique ID for this managed resource.
    principal_type str
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER
    accountId String
    (string) - The account ID parent of the workspace where the principal is assigned
    effectiveEntitlements List<String>
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    id String
    The provider-assigned unique ID for this managed resource.
    principalType String
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER

    Look up Existing AccountIamWorkspaceAssignmentV2 Resource

    Get an existing AccountIamWorkspaceAssignmentV2 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AccountIamWorkspaceAssignmentV2State, opts?: CustomResourceOptions): AccountIamWorkspaceAssignmentV2
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        effective_entitlements: Optional[Sequence[str]] = None,
        entitlements: Optional[Sequence[str]] = None,
        principal_id: Optional[str] = None,
        principal_type: Optional[str] = None,
        workspace_id: Optional[str] = None) -> AccountIamWorkspaceAssignmentV2
    func GetAccountIamWorkspaceAssignmentV2(ctx *Context, name string, id IDInput, state *AccountIamWorkspaceAssignmentV2State, opts ...ResourceOption) (*AccountIamWorkspaceAssignmentV2, error)
    public static AccountIamWorkspaceAssignmentV2 Get(string name, Input<string> id, AccountIamWorkspaceAssignmentV2State? state, CustomResourceOptions? opts = null)
    public static AccountIamWorkspaceAssignmentV2 get(String name, Output<String> id, AccountIamWorkspaceAssignmentV2State state, CustomResourceOptions options)
    resources:  _:    type: databricks:AccountIamWorkspaceAssignmentV2    get:      id: ${id}
    import {
  to = databricks_account_iam_workspace_assignment_v2.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    (string) - The account ID parent of the workspace where the principal is assigned
    EffectiveEntitlements List<string>
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    Entitlements List<string>
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    PrincipalId string
    The internal ID of the principal (user/sp/group) in Databricks
    PrincipalType string
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER
    WorkspaceId string
    (integer) - The workspace ID where the principal is assigned
    AccountId string
    (string) - The account ID parent of the workspace where the principal is assigned
    EffectiveEntitlements []string
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    Entitlements []string
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    PrincipalId string
    The internal ID of the principal (user/sp/group) in Databricks
    PrincipalType string
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER
    WorkspaceId string
    (integer) - The workspace ID where the principal is assigned
    account_id string
    (string) - The account ID parent of the workspace where the principal is assigned
    effective_entitlements list(string)
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    entitlements list(string)
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    principal_id string
    The internal ID of the principal (user/sp/group) in Databricks
    principal_type string
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER
    workspace_id string
    (integer) - The workspace ID where the principal is assigned
    accountId String
    (string) - The account ID parent of the workspace where the principal is assigned
    effectiveEntitlements List<String>
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    entitlements List<String>
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    principalId String
    The internal ID of the principal (user/sp/group) in Databricks
    principalType String
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER
    workspaceId String
    (integer) - The workspace ID where the principal is assigned
    accountId string
    (string) - The account ID parent of the workspace where the principal is assigned
    effectiveEntitlements string[]
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    entitlements string[]
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    principalId string
    The internal ID of the principal (user/sp/group) in Databricks
    principalType string
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER
    workspaceId string
    (integer) - The workspace ID where the principal is assigned
    account_id str
    (string) - The account ID parent of the workspace where the principal is assigned
    effective_entitlements Sequence[str]
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    entitlements Sequence[str]
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    principal_id str
    The internal ID of the principal (user/sp/group) in Databricks
    principal_type str
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER
    workspace_id str
    (integer) - The workspace ID where the principal is assigned
    accountId String
    (string) - The account ID parent of the workspace where the principal is assigned
    effectiveEntitlements List<String>
    (list of string) - Every entitlement the principal holds in this workspace, whether granted directly or through group membership. Get responses populate this field. List responses leave it empty
    entitlements List<String>
    Entitlements granted directly to the principal on this workspace. This is the only client-settable field. Create and update manage exactly this set, including entitlements the principal also holds through a group. List responses leave this field empty. Get a single principal to read its entitlements
    principalId String
    The internal ID of the principal (user/sp/group) in Databricks
    principalType String
    (string) - The type of the principal (user/service principal/group) that is assigned. Possible values are: GROUP, SERVICE_PRINCIPAL, USER
    workspaceId String
    (integer) - The workspace ID where the principal is assigned

    Package Details

    Repository
    databricks pulumi/pulumi-databricks
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the databricks Terraform Provider.
    databricks logo databricks logo
    Viewing docs for Databricks v1.109.0
    published on Tuesday, Sep 8, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-databricks

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial