databricksazure-databricksaccess-controldatabricks-notebook

View Only Access to Azure Databricks Notebooks


I am trying to give only View access to the Notebooks for a user. I have created a premium Databricks Account from my Azure portal. Then I create a new user in the Azure portal and gave Reader access to the Databricks workspace. Then I tried to access Databricks from that New user and I get the below error.

enter image description here

Then I added the new user in the Databricks users.

enter image description here

The user does not have any permission.

enter image description here

Now, when I tried to login again via the new user, I got the same "Unable to view page" error message saying "You do not have permission to access this page..."

So created a new group with Workspace access "On" and added the user in that group.

enter image description here enter image description here

Now, from new user I am able to login to the workspace. Then from the admin account I created a notebook and then gave only "Can View" access to the group I created.

enter image description here

But still from the new user account I am able to modify the notebook. I am suspecting it is because of some default inherited permission as below

enter image description here

I don't know from where this permission in inherited. I could see a default users group where all the users are getting added. Even for that group I removed all the access

enter image description here enter image description here

So in this case I am not sure from where the permission is getting inherited for "All workspace users" and how can I modify it. Please advice. Is there anything I am doing wrong? Thanks in advance.


Solution

  • I found the issue here. The culprit here is 'All workspace users' with default 'Can Manage' access. This cannot be modified for the 'Shared' folder inside 'Workspace' folder. We have to create notebooks outside 'Shared' folder to impose such permissions. Its preferable to have it in Git.