w.dbsql_permissions: ACL / Permissions

class databricks.sdk.service.sql.DbsqlPermissionsAPI

The SQL Permissions API is similar to the endpoints of the :method:permissions/set. However, this exposes only one endpoint, which gets the Access Control List for a given object. You cannot modify any permissions using this API.

There are three levels of permission:

  • CAN_VIEW: Allows read-only access

  • CAN_RUN: Allows read access and run access (superset of CAN_VIEW)

  • CAN_MANAGE: Allows all actions: read, run, edit, delete, modify permissions (superset of CAN_RUN)

get(object_type: ObjectTypePlural, object_id: str) → GetResponse

Get object ACL.

Gets a JSON representation of the access control list (ACL) for a specified object.

Parameters:

  • object_type – ObjectTypePlural The type of object permissions to check.

  • object_id – str Object ID. An ACL is returned for the object with this UUID.

Returns:

GetResponse

set(object_type: ObjectTypePlural, object_id: str [, access_control_list: Optional[List[AccessControl]]]) → SetResponse

Set object ACL.

Sets the access control list (ACL) for a specified object. This operation will complete rewrite the ACL.

Parameters:

  • object_type – ObjectTypePlural The type of object permission to set.

  • object_id – str Object ID. The ACL for the object with this UUID is overwritten by this request’s POST content.

  • access_control_list – List[AccessControl] (optional)

Returns:

SetResponse

transfer_ownership(object_type: OwnableObjectType, object_id: TransferOwnershipObjectId [, new_owner: Optional[str]]) → Success

Transfer object ownership.

Transfers ownership of a dashboard, query, or alert to an active user. Requires an admin API key.

Parameters:

  • object_type – OwnableObjectType The type of object on which to change ownership.

  • object_id – TransferOwnershipObjectId The ID of the object on which to change ownership.

  • new_owner – str (optional) Email address for the new owner, who must exist in the workspace.

Returns:

Success