Azure Databricks PAT token creation for Azure Service Principal Name

user_11481462 0
Viewed 1652

I could not add Azure AD Service Principal Name into Azure Databricks through portal but I was able to add my Service Principal with help of Databricks APIs Endpoints. How can I create PAT Token for my Service Principal Name.

azure-databricks databricks azure
2 Answers

You can use the service principal to create an Azure Active Directory Token and use that to authenticate into Databricks.

To create an AAD token

curl -X POST -H 'Content-Type: application/x-www-form-urlencoded' \
-d 'grant_type=client_credentials&client_id=<client-id>&resource=2ff814a6-3304-4ab8-85cb-cd0e6f879c1d&client_secret=<application-secret>' \
https://login.microsoftonline.com/<tenant-id>/oauth2/token

Replace <client-id> and <application-secret> with the application ID and secret of your service principal and <tenant-id> with your tenant ID. The response will include the value of the access token

{
    "access_token": "<token value>"
}

Since you have already added the service principal into the Databricks workspace, so now you can directly use the generated token to invoke the Databricks REST endpoints as the service principal:

curl -X GET \
-H 'Authorization: Bearer <token-value>' \
https://<databricks-instance>/api/2.0/clusters/list

You can also create additional tokens for the service principal using the Databricks Token API

curl -X POST -H 'Authorization: Bearer <token-value>' \
--data '{ "comment": "This is an example token", "lifetime_seconds": 7776000 }' \
https://<databricks-instance>/api/2.0/token/create

More details are available here.

user_111099100

Note: You add the Azure AD service principal to a workspace using the SCIM API.

Unfortunately, you cannot create Azure Databricks token programmatically.

You’ll use an Azure Databricks personal access token (PAT) to authenticate against the Databricks REST API. To create a PAT that can be used to make API requests:

  1. Go to your Azure Databricks workspace.
  2. Click the user icon in the top-right corner of the screen and click User Settings.
  3. Click Access Tokens > Generate New Token.
  4. Copy and save the token value.

Even for creating using APIs, initial authentication to this API is the same as for all of the Azure Databricks API endpoints: you must first authenticate as described in Authentication.

For more details, refer Tutorial: Run a job with an Azure service principal

user_81884330
Related