This resource allows you to attach a role to databricks_group. This role could be a pre-defined role such as account admin, or an instance profile ARN.
Attach an instance profile to a group
resource "databricks_instance_profile" "instance_profile" {
instance_profile_arn = "my_instance_profile_arn"
}
resource "databricks_group" "my_group" {
display_name = "my_group_name"
}
resource "databricks_group_role" "my_group_instance_profile" {
group_id = databricks_group.my_group.id
role = databricks_instance_profile.instance_profile.id
}
Attach account admin role to an account-level group
provider "databricks" {
host = "https://accounts.cloud.databricks.com"
account_id = var.databricks_account_id
client_id = var.client_id
client_secret = var.client_secret
}
resource "databricks_group" "my_group" {
display_name = "my_group_name"
}
resource "databricks_group_role" "my_group_account_admin" {
group_id = databricks_group.my_group.id
role = "account_admin"
}
The following arguments are supported:
group_id
- (Required) This is the id of the group resource.role
- (Required) Either a role name or the ARN/ID of the instance profile resource.In addition to all arguments above, the following attributes are exported:
id
- The id for the databricks_group_role
object which is in the format <group_id>|<role>
.The following resources are often used in the same context: