published on Monday, Mar 9, 2026 by Pulumi
published on Monday, Mar 9, 2026 by Pulumi
This resource allows you to manage groups in Databricks Workspace or Account Console (for AWS deployments). You can also associate Databricks users to groups. This is useful if you are using an application to sync users & groups with SCIM API.
Recommended to use along with Identity Provider SCIM provisioning to populate users into those groups:
Create Group Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Group(name: string, args: GroupArgs, opts?: CustomResourceOptions);@overload
def Group(resource_name: str,
args: GroupArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Group(resource_name: str,
opts: Optional[ResourceOptions] = None,
display_name: Optional[str] = None,
allow_cluster_create: Optional[bool] = None,
allow_instance_pool_create: Optional[bool] = None,
databricks_sql_access: Optional[bool] = None,
external_id: Optional[str] = None,
force: Optional[bool] = None,
url: Optional[str] = None,
workspace_access: Optional[bool] = None)func NewGroup(ctx *Context, name string, args GroupArgs, opts ...ResourceOption) (*Group, error)public Group(string name, GroupArgs args, CustomResourceOptions? opts = null)type: databricks:Group
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args GroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args GroupArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args GroupArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args GroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args GroupArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var groupResource = new Databricks.Group("groupResource", new()
{
DisplayName = "string",
AllowClusterCreate = false,
AllowInstancePoolCreate = false,
DatabricksSqlAccess = false,
ExternalId = "string",
Force = false,
Url = "string",
WorkspaceAccess = false,
});
example, err := databricks.NewGroup(ctx, "groupResource", &databricks.GroupArgs{
DisplayName: pulumi.String("string"),
AllowClusterCreate: pulumi.Bool(false),
AllowInstancePoolCreate: pulumi.Bool(false),
DatabricksSqlAccess: pulumi.Bool(false),
ExternalId: pulumi.String("string"),
Force: pulumi.Bool(false),
Url: pulumi.String("string"),
WorkspaceAccess: pulumi.Bool(false),
})
var groupResource = new Group("groupResource", GroupArgs.builder()
.displayName("string")
.allowClusterCreate(false)
.allowInstancePoolCreate(false)
.databricksSqlAccess(false)
.externalId("string")
.force(false)
.url("string")
.workspaceAccess(false)
.build());
group_resource = databricks.Group("groupResource",
display_name="string",
allow_cluster_create=False,
allow_instance_pool_create=False,
databricks_sql_access=False,
external_id="string",
force=False,
url="string",
workspace_access=False)
const groupResource = new databricks.Group("groupResource", {
displayName: "string",
allowClusterCreate: false,
allowInstancePoolCreate: false,
databricksSqlAccess: false,
externalId: "string",
force: false,
url: "string",
workspaceAccess: false,
});
type: databricks:Group
properties:
allowClusterCreate: false
allowInstancePoolCreate: false
databricksSqlAccess: false
displayName: string
externalId: string
force: false
url: string
workspaceAccess: false
Group Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Group resource accepts the following input properties:
- Display
Name string - This is the display name for the given group.
- Allow
Cluster boolCreate - This is a field to allow the group to have cluster create privileges. More fine grained permissions could be assigned with databricks.Permissions and cluster_id argument. Everyone without
allow_cluster_createargument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy. - Allow
Instance boolPool Create - This is a field to allow the group to have instance pool create privileges. More fine grained permissions could be assigned with databricks.Permissions and instance_pool_id argument.
- Databricks
Sql boolAccess - This is a field to allow the group to have access to Databricks SQL feature in User Interface and through databricks_sql_endpoint.
- External
Id string - ID of the group in an external identity provider.
- Force bool
- Url string
- Workspace
Access bool - This is a field to allow the group to have access to Databricks Workspace.
- Display
Name string - This is the display name for the given group.
- Allow
Cluster boolCreate - This is a field to allow the group to have cluster create privileges. More fine grained permissions could be assigned with databricks.Permissions and cluster_id argument. Everyone without
allow_cluster_createargument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy. - Allow
Instance boolPool Create - This is a field to allow the group to have instance pool create privileges. More fine grained permissions could be assigned with databricks.Permissions and instance_pool_id argument.
- Databricks
Sql boolAccess - This is a field to allow the group to have access to Databricks SQL feature in User Interface and through databricks_sql_endpoint.
- External
Id string - ID of the group in an external identity provider.
- Force bool
- Url string
- Workspace
Access bool - This is a field to allow the group to have access to Databricks Workspace.
- display
Name String - This is the display name for the given group.
- allow
Cluster BooleanCreate - This is a field to allow the group to have cluster create privileges. More fine grained permissions could be assigned with databricks.Permissions and cluster_id argument. Everyone without
allow_cluster_createargument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy. - allow
Instance BooleanPool Create - This is a field to allow the group to have instance pool create privileges. More fine grained permissions could be assigned with databricks.Permissions and instance_pool_id argument.
- databricks
Sql BooleanAccess - This is a field to allow the group to have access to Databricks SQL feature in User Interface and through databricks_sql_endpoint.
- external
Id String - ID of the group in an external identity provider.
- force Boolean
- url String
- workspace
Access Boolean - This is a field to allow the group to have access to Databricks Workspace.
- display
Name string - This is the display name for the given group.
- allow
Cluster booleanCreate - This is a field to allow the group to have cluster create privileges. More fine grained permissions could be assigned with databricks.Permissions and cluster_id argument. Everyone without
allow_cluster_createargument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy. - allow
Instance booleanPool Create - This is a field to allow the group to have instance pool create privileges. More fine grained permissions could be assigned with databricks.Permissions and instance_pool_id argument.
- databricks
Sql booleanAccess - This is a field to allow the group to have access to Databricks SQL feature in User Interface and through databricks_sql_endpoint.
- external
Id string - ID of the group in an external identity provider.
- force boolean
- url string
- workspace
Access boolean - This is a field to allow the group to have access to Databricks Workspace.
- display_
name str - This is the display name for the given group.
- allow_
cluster_ boolcreate - This is a field to allow the group to have cluster create privileges. More fine grained permissions could be assigned with databricks.Permissions and cluster_id argument. Everyone without
allow_cluster_createargument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy. - allow_
instance_ boolpool_ create - This is a field to allow the group to have instance pool create privileges. More fine grained permissions could be assigned with databricks.Permissions and instance_pool_id argument.
- databricks_
sql_ boolaccess - This is a field to allow the group to have access to Databricks SQL feature in User Interface and through databricks_sql_endpoint.
- external_
id str - ID of the group in an external identity provider.
- force bool
- url str
- workspace_
access bool - This is a field to allow the group to have access to Databricks Workspace.
- display
Name String - This is the display name for the given group.
- allow
Cluster BooleanCreate - This is a field to allow the group to have cluster create privileges. More fine grained permissions could be assigned with databricks.Permissions and cluster_id argument. Everyone without
allow_cluster_createargument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy. - allow
Instance BooleanPool Create - This is a field to allow the group to have instance pool create privileges. More fine grained permissions could be assigned with databricks.Permissions and instance_pool_id argument.
- databricks
Sql BooleanAccess - This is a field to allow the group to have access to Databricks SQL feature in User Interface and through databricks_sql_endpoint.
- external
Id String - ID of the group in an external identity provider.
- force Boolean
- url String
- workspace
Access Boolean - This is a field to allow the group to have access to Databricks Workspace.
Outputs
All input properties are implicitly available as output properties. Additionally, the Group resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Group Resource
Get an existing Group resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: GroupState, opts?: CustomResourceOptions): Group@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
allow_cluster_create: Optional[bool] = None,
allow_instance_pool_create: Optional[bool] = None,
databricks_sql_access: Optional[bool] = None,
display_name: Optional[str] = None,
external_id: Optional[str] = None,
force: Optional[bool] = None,
url: Optional[str] = None,
workspace_access: Optional[bool] = None) -> Groupfunc GetGroup(ctx *Context, name string, id IDInput, state *GroupState, opts ...ResourceOption) (*Group, error)public static Group Get(string name, Input<string> id, GroupState? state, CustomResourceOptions? opts = null)public static Group get(String name, Output<String> id, GroupState state, CustomResourceOptions options)resources: _: type: databricks:Group get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Allow
Cluster boolCreate - This is a field to allow the group to have cluster create privileges. More fine grained permissions could be assigned with databricks.Permissions and cluster_id argument. Everyone without
allow_cluster_createargument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy. - Allow
Instance boolPool Create - This is a field to allow the group to have instance pool create privileges. More fine grained permissions could be assigned with databricks.Permissions and instance_pool_id argument.
- Databricks
Sql boolAccess - This is a field to allow the group to have access to Databricks SQL feature in User Interface and through databricks_sql_endpoint.
- Display
Name string - This is the display name for the given group.
- External
Id string - ID of the group in an external identity provider.
- Force bool
- Url string
- Workspace
Access bool - This is a field to allow the group to have access to Databricks Workspace.
- Allow
Cluster boolCreate - This is a field to allow the group to have cluster create privileges. More fine grained permissions could be assigned with databricks.Permissions and cluster_id argument. Everyone without
allow_cluster_createargument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy. - Allow
Instance boolPool Create - This is a field to allow the group to have instance pool create privileges. More fine grained permissions could be assigned with databricks.Permissions and instance_pool_id argument.
- Databricks
Sql boolAccess - This is a field to allow the group to have access to Databricks SQL feature in User Interface and through databricks_sql_endpoint.
- Display
Name string - This is the display name for the given group.
- External
Id string - ID of the group in an external identity provider.
- Force bool
- Url string
- Workspace
Access bool - This is a field to allow the group to have access to Databricks Workspace.
- allow
Cluster BooleanCreate - This is a field to allow the group to have cluster create privileges. More fine grained permissions could be assigned with databricks.Permissions and cluster_id argument. Everyone without
allow_cluster_createargument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy. - allow
Instance BooleanPool Create - This is a field to allow the group to have instance pool create privileges. More fine grained permissions could be assigned with databricks.Permissions and instance_pool_id argument.
- databricks
Sql BooleanAccess - This is a field to allow the group to have access to Databricks SQL feature in User Interface and through databricks_sql_endpoint.
- display
Name String - This is the display name for the given group.
- external
Id String - ID of the group in an external identity provider.
- force Boolean
- url String
- workspace
Access Boolean - This is a field to allow the group to have access to Databricks Workspace.
- allow
Cluster booleanCreate - This is a field to allow the group to have cluster create privileges. More fine grained permissions could be assigned with databricks.Permissions and cluster_id argument. Everyone without
allow_cluster_createargument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy. - allow
Instance booleanPool Create - This is a field to allow the group to have instance pool create privileges. More fine grained permissions could be assigned with databricks.Permissions and instance_pool_id argument.
- databricks
Sql booleanAccess - This is a field to allow the group to have access to Databricks SQL feature in User Interface and through databricks_sql_endpoint.
- display
Name string - This is the display name for the given group.
- external
Id string - ID of the group in an external identity provider.
- force boolean
- url string
- workspace
Access boolean - This is a field to allow the group to have access to Databricks Workspace.
- allow_
cluster_ boolcreate - This is a field to allow the group to have cluster create privileges. More fine grained permissions could be assigned with databricks.Permissions and cluster_id argument. Everyone without
allow_cluster_createargument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy. - allow_
instance_ boolpool_ create - This is a field to allow the group to have instance pool create privileges. More fine grained permissions could be assigned with databricks.Permissions and instance_pool_id argument.
- databricks_
sql_ boolaccess - This is a field to allow the group to have access to Databricks SQL feature in User Interface and through databricks_sql_endpoint.
- display_
name str - This is the display name for the given group.
- external_
id str - ID of the group in an external identity provider.
- force bool
- url str
- workspace_
access bool - This is a field to allow the group to have access to Databricks Workspace.
- allow
Cluster BooleanCreate - This is a field to allow the group to have cluster create privileges. More fine grained permissions could be assigned with databricks.Permissions and cluster_id argument. Everyone without
allow_cluster_createargument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy. - allow
Instance BooleanPool Create - This is a field to allow the group to have instance pool create privileges. More fine grained permissions could be assigned with databricks.Permissions and instance_pool_id argument.
- databricks
Sql BooleanAccess - This is a field to allow the group to have access to Databricks SQL feature in User Interface and through databricks_sql_endpoint.
- display
Name String - This is the display name for the given group.
- external
Id String - ID of the group in an external identity provider.
- force Boolean
- url String
- workspace
Access Boolean - This is a field to allow the group to have access to Databricks Workspace.
Import
You can import a databricks_group resource with the name my_group like the followingbash
$ pulumi import databricks:index/group:Group my_group <group_id>
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- databricks pulumi/pulumi-databricks
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
databricksTerraform Provider.
published on Monday, Mar 9, 2026 by Pulumi
