a.settings.csp_enablement_account: Compliance Security Profile For New Workspaces

class databricks.sdk.service.settings.CspEnablementAccountAPI

The compliance security profile settings at the account level control whether to enable it for new workspaces. By default, this account-level setting is disabled for new workspaces. After workspace creation, account admins can enable the compliance security profile individually for each workspace.

This settings can be disabled so that new workspaces do not have compliance security profile enabled by default.

get([, etag: Optional[str]]) → CspEnablementAccountSetting

Gets the compliance security profile setting for new workspaces.

Parameters:

etag – str (optional) etag used for versioning. The response is at least as fresh as the eTag provided. This is used for optimistic concurrency control as a way to help prevent simultaneous writes of a setting overwriting each other. It is strongly suggested that systems make use of the etag in the read -> delete pattern to perform setting deletions in order to avoid race conditions. That is, get an etag from a GET request, and pass it with the DELETE request to identify the rule set version you are deleting.

Returns:

CspEnablementAccountSetting

update(allow_missing: bool, setting: CspEnablementAccountSetting, field_mask: str) → CspEnablementAccountSetting

Updates the value of the compliance security profile setting for new workspaces.

Parameters:

  • allow_missing – bool This should always be set to true for Settings API. Added for AIP compliance.

  • setting – CspEnablementAccountSetting

  • field_mask –

    str The field mask must be a single string, with multiple fields separated by commas (no spaces). The field path is relative to the resource object, using a dot (.) to navigate sub-fields (e.g., author.given_name). Specification of elements in sequence or map fields is not allowed, as only the entire collection field can be specified. Field names must exactly match the resource field names.

    A field mask of * indicates full replacement. It’s recommended to always explicitly list the fields being updated and avoid using * wildcards, as it can lead to unintended results if the API changes in the future.

Returns:

CspEnablementAccountSetting