User

laktory.models.resources.databricks.User

Bases: BaseModel, PulumiResource, TerraformResource

Databricks user

ATTRIBUTE	DESCRIPTION
acl_principal_id	Identifier for use in databricks_access_control_rule_set, e.g. groups/Some Group. TYPE: str
active	Either user is active or not. True by default, but can be set to false in case of user deactivation with preserving user assets. TYPE: bool
allow_cluster_create	This is a field to allow the group to have cluster create privileges. More fine grained permissions could be assigned with databricks.Permissions and cluster_id argument. Everyone without allow_cluster_create argument set, but with permission to use Cluster Policy would be able to create clusters, but within boundaries of that specific policy. TYPE: bool
allow_instance_pool_create	This is a field to allow the group to have instance pool create privileges. More fine grained permissions could be assigned with databricks.Permissions and instance_pool_id argument. TYPE: bool
databricks_sql_access	This is a field to allow the group to have access to Databricks SQL feature in User Interface and through databricks_sql_endpoint. TYPE: bool
disable_as_user_deletion	Deactivate the user when deleting the resource, rather than deleting the user entirely. Defaults to true when the provider is configured at the account-level and false when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags. TYPE: bool
display_name	Display name for the user TYPE: str
external_id	ID of the user in an external identity provider. TYPE: str
force	Ignore cannot create group: User with username X already exists. errors and implicitly import the specific group into IaC state, enforcing entitlements defined in the instance of resource. This functionality is experimental and is designed to simplify corner cases, like Azure Active Directory synchronisation. TYPE: bool
force_delete_home_dir	This flag determines whether the user's home directory is deleted when the user is deleted. It will have not impact when in the accounts SCIM API. False by default. TYPE: bool
force_delete_repos	This flag determines whether the user's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default. TYPE: bool
group_ids	List of the group ids that the user should be member of. TYPE: list[str]
home	Home folder of the user, e.g. /Users/mr.foo@example.com. TYPE: str
lookup_existing	Specifications for looking up existing resource. Other attributes will be ignored. TYPE: UserLookup
repos	Personal Repos location of the user, e.g. /Repos/mr.foo@example.com. TYPE: str
roles	List of roles assigned to the user e.g. ("account_admin") TYPE: list[str]
workspace_access	When True, the user is allowed to have workspace access TYPE: bool

Examples:

from laktory import models

u = models.resources.databricks.User(
    user_name="john.doe@okube.ai",
    display_name="John Doe",
    group_ids=[
        "${resources.group-role-engineer.id}",
        "${resources.group-domain-finance.id}",
    ],
    roles=["account_admin"],
)

Attributes

additional_core_resources property

additional_core_resources

• user roles
• user group members

--

laktory.models.resources.databricks.user.UserLookup

Bases: ResourceLookup

ATTRIBUTE	DESCRIPTION
user_id	ID of the user TYPE: Union[int, str]
user_name	User name of the user. The user must exist before this resource can be planned. Argument only supported by Terraform IaC backend. TYPE: str