I am trying to give only View access to the Notebooks for a user. I have created a premium Databricks Account from my Azure portal. Then I create a new user in the Azure portal and gave Reader access to the Databricks workspace. Then I tried to access Databricks from that New user and I get the below error.
Then I added the new user in the Databricks users.
The user does not have any permission.
Now, when I tried to login again via the new user, I got the same "Unable to view page" error message saying "You do not have permission to access this page..."
So created a new group with Workspace access "On" and added the user in that group.
Now, from new user I am able to login to the workspace. Then from the admin account I created a notebook and then gave only "Can View" access to the group I created.
But still from the new user account I am able to modify the notebook. I am suspecting it is because of some default inherited permission as below
I don't know from where this permission in inherited. I could see a default users group where all the users are getting added. Even for that group I removed all the access
So in this case I am not sure from where the permission is getting inherited for "All workspace users" and how can I modify it. Please advice. Is there anything I am doing wrong? Thanks in advance.
I found the issue here. The culprit here is 'All workspace users' with default 'Can Manage' access. This cannot be modified for the 'Shared' folder inside 'Workspace' folder. We have to create notebooks outside 'Shared' folder to impose such permissions. Its preferable to have it in Git.