pulumi-databricks 1.74.0a1753335781__py3-none-any.whl → 1.77.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (252) hide show
  1. pulumi_databricks/__init__.py +185 -12
  2. pulumi_databricks/_inputs.py +30467 -20225
  3. pulumi_databricks/access_control_rule_set.py +28 -29
  4. pulumi_databricks/account_federation_policy.py +473 -0
  5. pulumi_databricks/account_network_policy.py +74 -43
  6. pulumi_databricks/account_setting_v2.py +759 -0
  7. pulumi_databricks/aibi_dashboard_embedding_access_policy_setting.py +30 -31
  8. pulumi_databricks/aibi_dashboard_embedding_approved_domains_setting.py +30 -31
  9. pulumi_databricks/alert.py +185 -186
  10. pulumi_databricks/alert_v2.py +369 -211
  11. pulumi_databricks/app.py +315 -209
  12. pulumi_databricks/apps_settings_custom_template.py +531 -0
  13. pulumi_databricks/artifact_allowlist.py +72 -73
  14. pulumi_databricks/automatic_cluster_update_workspace_setting.py +30 -31
  15. pulumi_databricks/budget.py +84 -85
  16. pulumi_databricks/budget_policy.py +75 -53
  17. pulumi_databricks/catalog.py +544 -225
  18. pulumi_databricks/catalog_workspace_binding.py +82 -83
  19. pulumi_databricks/cluster.py +561 -683
  20. pulumi_databricks/cluster_policy.py +115 -116
  21. pulumi_databricks/compliance_security_profile_workspace_setting.py +30 -31
  22. pulumi_databricks/config/__init__.py +1 -1
  23. pulumi_databricks/config/__init__.pyi +3 -2
  24. pulumi_databricks/config/vars.py +40 -37
  25. pulumi_databricks/connection.py +346 -211
  26. pulumi_databricks/credential.py +262 -263
  27. pulumi_databricks/custom_app_integration.py +175 -176
  28. pulumi_databricks/dashboard.py +207 -208
  29. pulumi_databricks/data_quality_monitor.py +453 -0
  30. pulumi_databricks/data_quality_refresh.py +492 -0
  31. pulumi_databricks/database_database_catalog.py +437 -0
  32. pulumi_databricks/database_instance.py +938 -137
  33. pulumi_databricks/database_synced_database_table.py +589 -0
  34. pulumi_databricks/dbfs_file.py +87 -84
  35. pulumi_databricks/default_namespace_setting.py +30 -31
  36. pulumi_databricks/directory.py +61 -62
  37. pulumi_databricks/disable_legacy_access_setting.py +109 -33
  38. pulumi_databricks/disable_legacy_dbfs_setting.py +58 -39
  39. pulumi_databricks/disable_legacy_features_setting.py +62 -37
  40. pulumi_databricks/enhanced_security_monitoring_workspace_setting.py +30 -31
  41. pulumi_databricks/entitlements.py +148 -149
  42. pulumi_databricks/entity_tag_assignment.py +409 -0
  43. pulumi_databricks/external_location.py +276 -290
  44. pulumi_databricks/external_metadata.py +726 -0
  45. pulumi_databricks/feature_engineering_feature.py +480 -0
  46. pulumi_databricks/feature_engineering_materialized_feature.py +397 -0
  47. pulumi_databricks/file.py +96 -97
  48. pulumi_databricks/get_account_federation_policies.py +127 -0
  49. pulumi_databricks/get_account_federation_policy.py +214 -0
  50. pulumi_databricks/get_account_network_policies.py +36 -7
  51. pulumi_databricks/get_account_network_policy.py +33 -29
  52. pulumi_databricks/get_account_setting_v2.py +331 -0
  53. pulumi_databricks/get_alert_v2.py +100 -84
  54. pulumi_databricks/get_alerts_v2.py +35 -17
  55. pulumi_databricks/get_app.py +31 -20
  56. pulumi_databricks/get_apps.py +26 -15
  57. pulumi_databricks/get_apps_settings_custom_template.py +207 -0
  58. pulumi_databricks/get_apps_settings_custom_templates.py +133 -0
  59. pulumi_databricks/get_aws_assume_role_policy.py +27 -28
  60. pulumi_databricks/get_aws_bucket_policy.py +39 -40
  61. pulumi_databricks/get_aws_cross_account_policy.py +47 -48
  62. pulumi_databricks/get_aws_unity_catalog_assume_role_policy.py +35 -36
  63. pulumi_databricks/get_aws_unity_catalog_policy.py +35 -36
  64. pulumi_databricks/get_budget_policies.py +74 -11
  65. pulumi_databricks/get_budget_policy.py +43 -39
  66. pulumi_databricks/get_catalog.py +35 -19
  67. pulumi_databricks/get_catalogs.py +32 -14
  68. pulumi_databricks/get_cluster.py +41 -25
  69. pulumi_databricks/get_cluster_policy.py +72 -54
  70. pulumi_databricks/get_clusters.py +41 -25
  71. pulumi_databricks/get_current_config.py +23 -24
  72. pulumi_databricks/get_current_metastore.py +29 -13
  73. pulumi_databricks/get_current_user.py +17 -18
  74. pulumi_databricks/get_dashboards.py +34 -15
  75. pulumi_databricks/get_data_quality_monitor.py +210 -0
  76. pulumi_databricks/get_data_quality_monitors.py +143 -0
  77. pulumi_databricks/get_data_quality_refresh.py +270 -0
  78. pulumi_databricks/get_data_quality_refreshes.py +207 -0
  79. pulumi_databricks/get_database_database_catalog.py +176 -0
  80. pulumi_databricks/get_database_database_catalogs.py +120 -0
  81. pulumi_databricks/get_database_instance.py +274 -50
  82. pulumi_databricks/get_database_instances.py +35 -11
  83. pulumi_databricks/get_database_synced_database_table.py +225 -0
  84. pulumi_databricks/get_database_synced_database_tables.py +120 -0
  85. pulumi_databricks/get_dbfs_file.py +19 -20
  86. pulumi_databricks/get_dbfs_file_paths.py +16 -17
  87. pulumi_databricks/get_directory.py +43 -25
  88. pulumi_databricks/get_entity_tag_assignment.py +202 -0
  89. pulumi_databricks/get_entity_tag_assignments.py +187 -0
  90. pulumi_databricks/get_external_location.py +35 -19
  91. pulumi_databricks/get_external_locations.py +32 -14
  92. pulumi_databricks/get_external_metadata.py +292 -0
  93. pulumi_databricks/get_external_metadatas.py +135 -0
  94. pulumi_databricks/get_feature_engineering_feature.py +179 -0
  95. pulumi_databricks/get_feature_engineering_features.py +103 -0
  96. pulumi_databricks/get_feature_engineering_materialized_feature.py +180 -0
  97. pulumi_databricks/get_feature_engineering_materialized_features.py +123 -0
  98. pulumi_databricks/get_functions.py +38 -24
  99. pulumi_databricks/get_group.py +85 -86
  100. pulumi_databricks/get_instance_pool.py +10 -11
  101. pulumi_databricks/get_instance_profiles.py +25 -9
  102. pulumi_databricks/get_job.py +22 -23
  103. pulumi_databricks/get_jobs.py +44 -26
  104. pulumi_databricks/get_materialized_features_feature_tag.py +102 -0
  105. pulumi_databricks/get_materialized_features_feature_tags.py +133 -0
  106. pulumi_databricks/get_metastore.py +28 -29
  107. pulumi_databricks/get_metastores.py +9 -10
  108. pulumi_databricks/get_mlflow_experiment.py +62 -46
  109. pulumi_databricks/get_mlflow_model.py +47 -31
  110. pulumi_databricks/get_mlflow_models.py +32 -14
  111. pulumi_databricks/get_mws_credentials.py +9 -10
  112. pulumi_databricks/get_mws_network_connectivity_config.py +40 -41
  113. pulumi_databricks/get_mws_network_connectivity_configs.py +15 -16
  114. pulumi_databricks/get_mws_workspaces.py +5 -6
  115. pulumi_databricks/get_node_type.py +123 -87
  116. pulumi_databricks/get_notebook.py +37 -38
  117. pulumi_databricks/get_notebook_paths.py +16 -17
  118. pulumi_databricks/get_notification_destinations.py +33 -18
  119. pulumi_databricks/get_online_store.py +36 -27
  120. pulumi_databricks/get_online_stores.py +33 -13
  121. pulumi_databricks/get_pipelines.py +49 -31
  122. pulumi_databricks/get_policy_info.py +338 -0
  123. pulumi_databricks/get_policy_infos.py +169 -0
  124. pulumi_databricks/get_quality_monitor_v2.py +21 -18
  125. pulumi_databricks/get_quality_monitors_v2.py +26 -8
  126. pulumi_databricks/get_registered_model.py +41 -27
  127. pulumi_databricks/get_registered_model_versions.py +29 -15
  128. pulumi_databricks/get_rfa_access_request_destinations.py +126 -0
  129. pulumi_databricks/get_schema.py +32 -16
  130. pulumi_databricks/get_schemas.py +38 -20
  131. pulumi_databricks/get_service_principal.py +80 -58
  132. pulumi_databricks/get_service_principal_federation_policies.py +151 -0
  133. pulumi_databricks/get_service_principal_federation_policy.py +220 -0
  134. pulumi_databricks/get_service_principals.py +16 -17
  135. pulumi_databricks/get_serving_endpoints.py +23 -9
  136. pulumi_databricks/get_share.py +130 -32
  137. pulumi_databricks/get_shares.py +29 -11
  138. pulumi_databricks/get_spark_version.py +87 -69
  139. pulumi_databricks/get_sql_warehouse.py +124 -110
  140. pulumi_databricks/get_sql_warehouses.py +37 -19
  141. pulumi_databricks/get_storage_credential.py +32 -16
  142. pulumi_databricks/get_storage_credentials.py +32 -14
  143. pulumi_databricks/get_table.py +30 -14
  144. pulumi_databricks/get_tables.py +41 -23
  145. pulumi_databricks/get_tag_policies.py +139 -0
  146. pulumi_databricks/get_tag_policy.py +175 -0
  147. pulumi_databricks/get_user.py +33 -34
  148. pulumi_databricks/get_views.py +41 -23
  149. pulumi_databricks/get_volume.py +32 -16
  150. pulumi_databricks/get_volumes.py +41 -23
  151. pulumi_databricks/get_workspace_network_option.py +45 -26
  152. pulumi_databricks/get_workspace_setting_v2.py +331 -0
  153. pulumi_databricks/get_zones.py +39 -21
  154. pulumi_databricks/git_credential.py +242 -76
  155. pulumi_databricks/global_init_script.py +99 -100
  156. pulumi_databricks/grant.py +215 -212
  157. pulumi_databricks/grants.py +200 -211
  158. pulumi_databricks/group.py +176 -177
  159. pulumi_databricks/group_instance_profile.py +37 -38
  160. pulumi_databricks/group_member.py +37 -38
  161. pulumi_databricks/group_role.py +37 -38
  162. pulumi_databricks/instance_pool.py +168 -169
  163. pulumi_databricks/instance_profile.py +69 -70
  164. pulumi_databricks/ip_access_list.py +71 -72
  165. pulumi_databricks/job.py +426 -346
  166. pulumi_databricks/lakehouse_monitor.py +199 -200
  167. pulumi_databricks/library.py +264 -99
  168. pulumi_databricks/materialized_features_feature_tag.py +213 -0
  169. pulumi_databricks/metastore.py +254 -255
  170. pulumi_databricks/metastore_assignment.py +52 -53
  171. pulumi_databricks/metastore_data_access.py +153 -154
  172. pulumi_databricks/metastore_provider.py +69 -70
  173. pulumi_databricks/mlflow_experiment.py +108 -109
  174. pulumi_databricks/mlflow_model.py +45 -46
  175. pulumi_databricks/mlflow_webhook.py +75 -76
  176. pulumi_databricks/model_serving.py +195 -74
  177. pulumi_databricks/model_serving_provisioned_throughput.py +100 -54
  178. pulumi_databricks/mount.py +103 -104
  179. pulumi_databricks/mws_credentials.py +99 -100
  180. pulumi_databricks/mws_customer_managed_keys.py +75 -76
  181. pulumi_databricks/mws_log_delivery.py +188 -189
  182. pulumi_databricks/mws_ncc_binding.py +35 -36
  183. pulumi_databricks/mws_ncc_private_endpoint_rule.py +312 -289
  184. pulumi_databricks/mws_network_connectivity_config.py +136 -98
  185. pulumi_databricks/mws_networks.py +159 -160
  186. pulumi_databricks/mws_permission_assignment.py +70 -71
  187. pulumi_databricks/mws_private_access_settings.py +116 -117
  188. pulumi_databricks/mws_storage_configurations.py +74 -75
  189. pulumi_databricks/mws_vpc_endpoint.py +149 -150
  190. pulumi_databricks/mws_workspaces.py +464 -418
  191. pulumi_databricks/notebook.py +143 -144
  192. pulumi_databricks/notification_destination.py +38 -39
  193. pulumi_databricks/obo_token.py +63 -64
  194. pulumi_databricks/online_store.py +121 -70
  195. pulumi_databricks/online_table.py +41 -42
  196. pulumi_databricks/outputs.py +47821 -30802
  197. pulumi_databricks/permission_assignment.py +298 -57
  198. pulumi_databricks/permissions.py +523 -362
  199. pulumi_databricks/pipeline.py +515 -480
  200. pulumi_databricks/policy_info.py +916 -0
  201. pulumi_databricks/provider.py +283 -269
  202. pulumi_databricks/pulumi-plugin.json +1 -1
  203. pulumi_databricks/quality_monitor.py +263 -217
  204. pulumi_databricks/quality_monitor_v2.py +49 -46
  205. pulumi_databricks/query.py +227 -228
  206. pulumi_databricks/recipient.py +208 -209
  207. pulumi_databricks/registered_model.py +393 -122
  208. pulumi_databricks/repo.py +117 -118
  209. pulumi_databricks/restrict_workspace_admins_setting.py +30 -31
  210. pulumi_databricks/rfa_access_request_destinations.py +286 -0
  211. pulumi_databricks/schema.py +159 -160
  212. pulumi_databricks/secret.py +72 -73
  213. pulumi_databricks/secret_acl.py +52 -53
  214. pulumi_databricks/secret_scope.py +55 -56
  215. pulumi_databricks/service_principal.py +279 -278
  216. pulumi_databricks/service_principal_federation_policy.py +469 -0
  217. pulumi_databricks/service_principal_role.py +35 -36
  218. pulumi_databricks/service_principal_secret.py +156 -157
  219. pulumi_databricks/share.py +186 -187
  220. pulumi_databricks/sql_alert.py +98 -99
  221. pulumi_databricks/sql_dashboard.py +94 -95
  222. pulumi_databricks/sql_endpoint.py +298 -266
  223. pulumi_databricks/sql_global_config.py +103 -104
  224. pulumi_databricks/sql_permissions.py +121 -122
  225. pulumi_databricks/sql_query.py +150 -151
  226. pulumi_databricks/sql_table.py +310 -283
  227. pulumi_databricks/sql_visualization.py +92 -93
  228. pulumi_databricks/sql_widget.py +91 -88
  229. pulumi_databricks/storage_credential.py +236 -184
  230. pulumi_databricks/system_schema.py +50 -51
  231. pulumi_databricks/table.py +147 -148
  232. pulumi_databricks/tag_policy.py +357 -0
  233. pulumi_databricks/token.py +83 -84
  234. pulumi_databricks/user.py +284 -285
  235. pulumi_databricks/user_instance_profile.py +35 -36
  236. pulumi_databricks/user_role.py +35 -36
  237. pulumi_databricks/vector_search_endpoint.py +117 -118
  238. pulumi_databricks/vector_search_index.py +86 -87
  239. pulumi_databricks/volume.py +129 -130
  240. pulumi_databricks/workspace_binding.py +82 -131
  241. pulumi_databricks/workspace_conf.py +18 -19
  242. pulumi_databricks/workspace_file.py +100 -101
  243. pulumi_databricks/workspace_network_option.py +89 -40
  244. pulumi_databricks/workspace_setting_v2.py +759 -0
  245. {pulumi_databricks-1.74.0a1753335781.dist-info → pulumi_databricks-1.77.0.dist-info}/METADATA +1 -1
  246. pulumi_databricks-1.77.0.dist-info/RECORD +250 -0
  247. pulumi_databricks/get_recipient_federation_policies.py +0 -83
  248. pulumi_databricks/get_recipient_federation_policy.py +0 -166
  249. pulumi_databricks/recipient_federation_policy.py +0 -347
  250. pulumi_databricks-1.74.0a1753335781.dist-info/RECORD +0 -205
  251. {pulumi_databricks-1.74.0a1753335781.dist-info → pulumi_databricks-1.77.0.dist-info}/WHEEL +0 -0
  252. {pulumi_databricks-1.74.0a1753335781.dist-info → pulumi_databricks-1.77.0.dist-info}/top_level.txt +0 -0
@@ -2,8 +2,7 @@
2
2
  # *** WARNING: this file was generated by pulumi-language-python. ***
3
3
  # *** Do not edit by hand unless you're certain you know what you are doing! ***
4
4
 
5
- import builtins
6
- import copy
5
+ import builtins as _builtins
7
6
  import warnings
8
7
  import sys
9
8
  import pulumi
@@ -20,40 +19,40 @@ __all__ = ['ServicePrincipalArgs', 'ServicePrincipal']
20
19
  @pulumi.input_type
21
20
  class ServicePrincipalArgs:
22
21
  def __init__(__self__, *,
23
- acl_principal_id: Optional[pulumi.Input[builtins.str]] = None,
24
- active: Optional[pulumi.Input[builtins.bool]] = None,
25
- allow_cluster_create: Optional[pulumi.Input[builtins.bool]] = None,
26
- allow_instance_pool_create: Optional[pulumi.Input[builtins.bool]] = None,
27
- application_id: Optional[pulumi.Input[builtins.str]] = None,
28
- databricks_sql_access: Optional[pulumi.Input[builtins.bool]] = None,
29
- disable_as_user_deletion: Optional[pulumi.Input[builtins.bool]] = None,
30
- display_name: Optional[pulumi.Input[builtins.str]] = None,
31
- external_id: Optional[pulumi.Input[builtins.str]] = None,
32
- force: Optional[pulumi.Input[builtins.bool]] = None,
33
- force_delete_home_dir: Optional[pulumi.Input[builtins.bool]] = None,
34
- force_delete_repos: Optional[pulumi.Input[builtins.bool]] = None,
35
- home: Optional[pulumi.Input[builtins.str]] = None,
36
- repos: Optional[pulumi.Input[builtins.str]] = None,
37
- workspace_access: Optional[pulumi.Input[builtins.bool]] = None,
38
- workspace_consume: Optional[pulumi.Input[builtins.bool]] = None):
22
+ acl_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
23
+ active: Optional[pulumi.Input[_builtins.bool]] = None,
24
+ allow_cluster_create: Optional[pulumi.Input[_builtins.bool]] = None,
25
+ allow_instance_pool_create: Optional[pulumi.Input[_builtins.bool]] = None,
26
+ application_id: Optional[pulumi.Input[_builtins.str]] = None,
27
+ databricks_sql_access: Optional[pulumi.Input[_builtins.bool]] = None,
28
+ disable_as_user_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
29
+ display_name: Optional[pulumi.Input[_builtins.str]] = None,
30
+ external_id: Optional[pulumi.Input[_builtins.str]] = None,
31
+ force: Optional[pulumi.Input[_builtins.bool]] = None,
32
+ force_delete_home_dir: Optional[pulumi.Input[_builtins.bool]] = None,
33
+ force_delete_repos: Optional[pulumi.Input[_builtins.bool]] = None,
34
+ home: Optional[pulumi.Input[_builtins.str]] = None,
35
+ repos: Optional[pulumi.Input[_builtins.str]] = None,
36
+ workspace_access: Optional[pulumi.Input[_builtins.bool]] = None,
37
+ workspace_consume: Optional[pulumi.Input[_builtins.bool]] = None):
39
38
  """
40
39
  The set of arguments for constructing a ServicePrincipal resource.
41
- :param pulumi.Input[builtins.str] acl_principal_id: identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
42
- :param pulumi.Input[builtins.bool] active: Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
43
- :param pulumi.Input[builtins.bool] allow_cluster_create: Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
44
- :param pulumi.Input[builtins.bool] allow_instance_pool_create: Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
45
- :param pulumi.Input[builtins.str] application_id: This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
46
- :param pulumi.Input[builtins.bool] databricks_sql_access: This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
47
- :param pulumi.Input[builtins.bool] disable_as_user_deletion: Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
48
- :param pulumi.Input[builtins.str] display_name: This is an alias for the service principal and can be the full name of the service principal.
49
- :param pulumi.Input[builtins.str] external_id: ID of the service principal in an external identity provider.
50
- :param pulumi.Input[builtins.bool] force: Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
51
- :param pulumi.Input[builtins.bool] force_delete_home_dir: This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
52
- :param pulumi.Input[builtins.bool] force_delete_repos: This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
53
- :param pulumi.Input[builtins.str] home: Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
54
- :param pulumi.Input[builtins.str] repos: Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
55
- :param pulumi.Input[builtins.bool] workspace_access: This is a field to allow the service principal to have access to a Databricks Workspace.
56
- :param pulumi.Input[builtins.bool] workspace_consume: This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
40
+ :param pulumi.Input[_builtins.str] acl_principal_id: identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
41
+ :param pulumi.Input[_builtins.bool] active: Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
42
+ :param pulumi.Input[_builtins.bool] allow_cluster_create: Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
43
+ :param pulumi.Input[_builtins.bool] allow_instance_pool_create: Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
44
+ :param pulumi.Input[_builtins.str] application_id: This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
45
+ :param pulumi.Input[_builtins.bool] databricks_sql_access: This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
46
+ :param pulumi.Input[_builtins.bool] disable_as_user_deletion: Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
47
+ :param pulumi.Input[_builtins.str] display_name: This is an alias for the service principal and can be the full name of the service principal.
48
+ :param pulumi.Input[_builtins.str] external_id: ID of the service principal in an external identity provider.
49
+ :param pulumi.Input[_builtins.bool] force: Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
50
+ :param pulumi.Input[_builtins.bool] force_delete_home_dir: This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
51
+ :param pulumi.Input[_builtins.bool] force_delete_repos: This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
52
+ :param pulumi.Input[_builtins.str] home: Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
53
+ :param pulumi.Input[_builtins.str] repos: Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
54
+ :param pulumi.Input[_builtins.bool] workspace_access: This is a field to allow the service principal to have access to a Databricks Workspace.
55
+ :param pulumi.Input[_builtins.bool] workspace_consume: This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
57
56
  """
58
57
  if acl_principal_id is not None:
59
58
  pulumi.set(__self__, "acl_principal_id", acl_principal_id)
@@ -88,236 +87,236 @@ class ServicePrincipalArgs:
88
87
  if workspace_consume is not None:
89
88
  pulumi.set(__self__, "workspace_consume", workspace_consume)
90
89
 
91
- @property
90
+ @_builtins.property
92
91
  @pulumi.getter(name="aclPrincipalId")
93
- def acl_principal_id(self) -> Optional[pulumi.Input[builtins.str]]:
92
+ def acl_principal_id(self) -> Optional[pulumi.Input[_builtins.str]]:
94
93
  """
95
94
  identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
96
95
  """
97
96
  return pulumi.get(self, "acl_principal_id")
98
97
 
99
98
  @acl_principal_id.setter
100
- def acl_principal_id(self, value: Optional[pulumi.Input[builtins.str]]):
99
+ def acl_principal_id(self, value: Optional[pulumi.Input[_builtins.str]]):
101
100
  pulumi.set(self, "acl_principal_id", value)
102
101
 
103
- @property
102
+ @_builtins.property
104
103
  @pulumi.getter
105
- def active(self) -> Optional[pulumi.Input[builtins.bool]]:
104
+ def active(self) -> Optional[pulumi.Input[_builtins.bool]]:
106
105
  """
107
106
  Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
108
107
  """
109
108
  return pulumi.get(self, "active")
110
109
 
111
110
  @active.setter
112
- def active(self, value: Optional[pulumi.Input[builtins.bool]]):
111
+ def active(self, value: Optional[pulumi.Input[_builtins.bool]]):
113
112
  pulumi.set(self, "active", value)
114
113
 
115
- @property
114
+ @_builtins.property
116
115
  @pulumi.getter(name="allowClusterCreate")
117
- def allow_cluster_create(self) -> Optional[pulumi.Input[builtins.bool]]:
116
+ def allow_cluster_create(self) -> Optional[pulumi.Input[_builtins.bool]]:
118
117
  """
119
118
  Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
120
119
  """
121
120
  return pulumi.get(self, "allow_cluster_create")
122
121
 
123
122
  @allow_cluster_create.setter
124
- def allow_cluster_create(self, value: Optional[pulumi.Input[builtins.bool]]):
123
+ def allow_cluster_create(self, value: Optional[pulumi.Input[_builtins.bool]]):
125
124
  pulumi.set(self, "allow_cluster_create", value)
126
125
 
127
- @property
126
+ @_builtins.property
128
127
  @pulumi.getter(name="allowInstancePoolCreate")
129
- def allow_instance_pool_create(self) -> Optional[pulumi.Input[builtins.bool]]:
128
+ def allow_instance_pool_create(self) -> Optional[pulumi.Input[_builtins.bool]]:
130
129
  """
131
130
  Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
132
131
  """
133
132
  return pulumi.get(self, "allow_instance_pool_create")
134
133
 
135
134
  @allow_instance_pool_create.setter
136
- def allow_instance_pool_create(self, value: Optional[pulumi.Input[builtins.bool]]):
135
+ def allow_instance_pool_create(self, value: Optional[pulumi.Input[_builtins.bool]]):
137
136
  pulumi.set(self, "allow_instance_pool_create", value)
138
137
 
139
- @property
138
+ @_builtins.property
140
139
  @pulumi.getter(name="applicationId")
141
- def application_id(self) -> Optional[pulumi.Input[builtins.str]]:
140
+ def application_id(self) -> Optional[pulumi.Input[_builtins.str]]:
142
141
  """
143
142
  This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
144
143
  """
145
144
  return pulumi.get(self, "application_id")
146
145
 
147
146
  @application_id.setter
148
- def application_id(self, value: Optional[pulumi.Input[builtins.str]]):
147
+ def application_id(self, value: Optional[pulumi.Input[_builtins.str]]):
149
148
  pulumi.set(self, "application_id", value)
150
149
 
151
- @property
150
+ @_builtins.property
152
151
  @pulumi.getter(name="databricksSqlAccess")
153
- def databricks_sql_access(self) -> Optional[pulumi.Input[builtins.bool]]:
152
+ def databricks_sql_access(self) -> Optional[pulumi.Input[_builtins.bool]]:
154
153
  """
155
154
  This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
156
155
  """
157
156
  return pulumi.get(self, "databricks_sql_access")
158
157
 
159
158
  @databricks_sql_access.setter
160
- def databricks_sql_access(self, value: Optional[pulumi.Input[builtins.bool]]):
159
+ def databricks_sql_access(self, value: Optional[pulumi.Input[_builtins.bool]]):
161
160
  pulumi.set(self, "databricks_sql_access", value)
162
161
 
163
- @property
162
+ @_builtins.property
164
163
  @pulumi.getter(name="disableAsUserDeletion")
165
- def disable_as_user_deletion(self) -> Optional[pulumi.Input[builtins.bool]]:
164
+ def disable_as_user_deletion(self) -> Optional[pulumi.Input[_builtins.bool]]:
166
165
  """
167
166
  Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
168
167
  """
169
168
  return pulumi.get(self, "disable_as_user_deletion")
170
169
 
171
170
  @disable_as_user_deletion.setter
172
- def disable_as_user_deletion(self, value: Optional[pulumi.Input[builtins.bool]]):
171
+ def disable_as_user_deletion(self, value: Optional[pulumi.Input[_builtins.bool]]):
173
172
  pulumi.set(self, "disable_as_user_deletion", value)
174
173
 
175
- @property
174
+ @_builtins.property
176
175
  @pulumi.getter(name="displayName")
177
- def display_name(self) -> Optional[pulumi.Input[builtins.str]]:
176
+ def display_name(self) -> Optional[pulumi.Input[_builtins.str]]:
178
177
  """
179
178
  This is an alias for the service principal and can be the full name of the service principal.
180
179
  """
181
180
  return pulumi.get(self, "display_name")
182
181
 
183
182
  @display_name.setter
184
- def display_name(self, value: Optional[pulumi.Input[builtins.str]]):
183
+ def display_name(self, value: Optional[pulumi.Input[_builtins.str]]):
185
184
  pulumi.set(self, "display_name", value)
186
185
 
187
- @property
186
+ @_builtins.property
188
187
  @pulumi.getter(name="externalId")
189
- def external_id(self) -> Optional[pulumi.Input[builtins.str]]:
188
+ def external_id(self) -> Optional[pulumi.Input[_builtins.str]]:
190
189
  """
191
190
  ID of the service principal in an external identity provider.
192
191
  """
193
192
  return pulumi.get(self, "external_id")
194
193
 
195
194
  @external_id.setter
196
- def external_id(self, value: Optional[pulumi.Input[builtins.str]]):
195
+ def external_id(self, value: Optional[pulumi.Input[_builtins.str]]):
197
196
  pulumi.set(self, "external_id", value)
198
197
 
199
- @property
198
+ @_builtins.property
200
199
  @pulumi.getter
201
- def force(self) -> Optional[pulumi.Input[builtins.bool]]:
200
+ def force(self) -> Optional[pulumi.Input[_builtins.bool]]:
202
201
  """
203
202
  Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
204
203
  """
205
204
  return pulumi.get(self, "force")
206
205
 
207
206
  @force.setter
208
- def force(self, value: Optional[pulumi.Input[builtins.bool]]):
207
+ def force(self, value: Optional[pulumi.Input[_builtins.bool]]):
209
208
  pulumi.set(self, "force", value)
210
209
 
211
- @property
210
+ @_builtins.property
212
211
  @pulumi.getter(name="forceDeleteHomeDir")
213
- def force_delete_home_dir(self) -> Optional[pulumi.Input[builtins.bool]]:
212
+ def force_delete_home_dir(self) -> Optional[pulumi.Input[_builtins.bool]]:
214
213
  """
215
214
  This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
216
215
  """
217
216
  return pulumi.get(self, "force_delete_home_dir")
218
217
 
219
218
  @force_delete_home_dir.setter
220
- def force_delete_home_dir(self, value: Optional[pulumi.Input[builtins.bool]]):
219
+ def force_delete_home_dir(self, value: Optional[pulumi.Input[_builtins.bool]]):
221
220
  pulumi.set(self, "force_delete_home_dir", value)
222
221
 
223
- @property
222
+ @_builtins.property
224
223
  @pulumi.getter(name="forceDeleteRepos")
225
- def force_delete_repos(self) -> Optional[pulumi.Input[builtins.bool]]:
224
+ def force_delete_repos(self) -> Optional[pulumi.Input[_builtins.bool]]:
226
225
  """
227
226
  This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
228
227
  """
229
228
  return pulumi.get(self, "force_delete_repos")
230
229
 
231
230
  @force_delete_repos.setter
232
- def force_delete_repos(self, value: Optional[pulumi.Input[builtins.bool]]):
231
+ def force_delete_repos(self, value: Optional[pulumi.Input[_builtins.bool]]):
233
232
  pulumi.set(self, "force_delete_repos", value)
234
233
 
235
- @property
234
+ @_builtins.property
236
235
  @pulumi.getter
237
- def home(self) -> Optional[pulumi.Input[builtins.str]]:
236
+ def home(self) -> Optional[pulumi.Input[_builtins.str]]:
238
237
  """
239
238
  Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
240
239
  """
241
240
  return pulumi.get(self, "home")
242
241
 
243
242
  @home.setter
244
- def home(self, value: Optional[pulumi.Input[builtins.str]]):
243
+ def home(self, value: Optional[pulumi.Input[_builtins.str]]):
245
244
  pulumi.set(self, "home", value)
246
245
 
247
- @property
246
+ @_builtins.property
248
247
  @pulumi.getter
249
- def repos(self) -> Optional[pulumi.Input[builtins.str]]:
248
+ def repos(self) -> Optional[pulumi.Input[_builtins.str]]:
250
249
  """
251
250
  Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
252
251
  """
253
252
  return pulumi.get(self, "repos")
254
253
 
255
254
  @repos.setter
256
- def repos(self, value: Optional[pulumi.Input[builtins.str]]):
255
+ def repos(self, value: Optional[pulumi.Input[_builtins.str]]):
257
256
  pulumi.set(self, "repos", value)
258
257
 
259
- @property
258
+ @_builtins.property
260
259
  @pulumi.getter(name="workspaceAccess")
261
- def workspace_access(self) -> Optional[pulumi.Input[builtins.bool]]:
260
+ def workspace_access(self) -> Optional[pulumi.Input[_builtins.bool]]:
262
261
  """
263
262
  This is a field to allow the service principal to have access to a Databricks Workspace.
264
263
  """
265
264
  return pulumi.get(self, "workspace_access")
266
265
 
267
266
  @workspace_access.setter
268
- def workspace_access(self, value: Optional[pulumi.Input[builtins.bool]]):
267
+ def workspace_access(self, value: Optional[pulumi.Input[_builtins.bool]]):
269
268
  pulumi.set(self, "workspace_access", value)
270
269
 
271
- @property
270
+ @_builtins.property
272
271
  @pulumi.getter(name="workspaceConsume")
273
- def workspace_consume(self) -> Optional[pulumi.Input[builtins.bool]]:
272
+ def workspace_consume(self) -> Optional[pulumi.Input[_builtins.bool]]:
274
273
  """
275
274
  This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
276
275
  """
277
276
  return pulumi.get(self, "workspace_consume")
278
277
 
279
278
  @workspace_consume.setter
280
- def workspace_consume(self, value: Optional[pulumi.Input[builtins.bool]]):
279
+ def workspace_consume(self, value: Optional[pulumi.Input[_builtins.bool]]):
281
280
  pulumi.set(self, "workspace_consume", value)
282
281
 
283
282
 
284
283
  @pulumi.input_type
285
284
  class _ServicePrincipalState:
286
285
  def __init__(__self__, *,
287
- acl_principal_id: Optional[pulumi.Input[builtins.str]] = None,
288
- active: Optional[pulumi.Input[builtins.bool]] = None,
289
- allow_cluster_create: Optional[pulumi.Input[builtins.bool]] = None,
290
- allow_instance_pool_create: Optional[pulumi.Input[builtins.bool]] = None,
291
- application_id: Optional[pulumi.Input[builtins.str]] = None,
292
- databricks_sql_access: Optional[pulumi.Input[builtins.bool]] = None,
293
- disable_as_user_deletion: Optional[pulumi.Input[builtins.bool]] = None,
294
- display_name: Optional[pulumi.Input[builtins.str]] = None,
295
- external_id: Optional[pulumi.Input[builtins.str]] = None,
296
- force: Optional[pulumi.Input[builtins.bool]] = None,
297
- force_delete_home_dir: Optional[pulumi.Input[builtins.bool]] = None,
298
- force_delete_repos: Optional[pulumi.Input[builtins.bool]] = None,
299
- home: Optional[pulumi.Input[builtins.str]] = None,
300
- repos: Optional[pulumi.Input[builtins.str]] = None,
301
- workspace_access: Optional[pulumi.Input[builtins.bool]] = None,
302
- workspace_consume: Optional[pulumi.Input[builtins.bool]] = None):
286
+ acl_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
287
+ active: Optional[pulumi.Input[_builtins.bool]] = None,
288
+ allow_cluster_create: Optional[pulumi.Input[_builtins.bool]] = None,
289
+ allow_instance_pool_create: Optional[pulumi.Input[_builtins.bool]] = None,
290
+ application_id: Optional[pulumi.Input[_builtins.str]] = None,
291
+ databricks_sql_access: Optional[pulumi.Input[_builtins.bool]] = None,
292
+ disable_as_user_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
293
+ display_name: Optional[pulumi.Input[_builtins.str]] = None,
294
+ external_id: Optional[pulumi.Input[_builtins.str]] = None,
295
+ force: Optional[pulumi.Input[_builtins.bool]] = None,
296
+ force_delete_home_dir: Optional[pulumi.Input[_builtins.bool]] = None,
297
+ force_delete_repos: Optional[pulumi.Input[_builtins.bool]] = None,
298
+ home: Optional[pulumi.Input[_builtins.str]] = None,
299
+ repos: Optional[pulumi.Input[_builtins.str]] = None,
300
+ workspace_access: Optional[pulumi.Input[_builtins.bool]] = None,
301
+ workspace_consume: Optional[pulumi.Input[_builtins.bool]] = None):
303
302
  """
304
303
  Input properties used for looking up and filtering ServicePrincipal resources.
305
- :param pulumi.Input[builtins.str] acl_principal_id: identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
306
- :param pulumi.Input[builtins.bool] active: Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
307
- :param pulumi.Input[builtins.bool] allow_cluster_create: Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
308
- :param pulumi.Input[builtins.bool] allow_instance_pool_create: Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
309
- :param pulumi.Input[builtins.str] application_id: This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
310
- :param pulumi.Input[builtins.bool] databricks_sql_access: This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
311
- :param pulumi.Input[builtins.bool] disable_as_user_deletion: Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
312
- :param pulumi.Input[builtins.str] display_name: This is an alias for the service principal and can be the full name of the service principal.
313
- :param pulumi.Input[builtins.str] external_id: ID of the service principal in an external identity provider.
314
- :param pulumi.Input[builtins.bool] force: Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
315
- :param pulumi.Input[builtins.bool] force_delete_home_dir: This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
316
- :param pulumi.Input[builtins.bool] force_delete_repos: This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
317
- :param pulumi.Input[builtins.str] home: Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
318
- :param pulumi.Input[builtins.str] repos: Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
319
- :param pulumi.Input[builtins.bool] workspace_access: This is a field to allow the service principal to have access to a Databricks Workspace.
320
- :param pulumi.Input[builtins.bool] workspace_consume: This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
304
+ :param pulumi.Input[_builtins.str] acl_principal_id: identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
305
+ :param pulumi.Input[_builtins.bool] active: Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
306
+ :param pulumi.Input[_builtins.bool] allow_cluster_create: Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
307
+ :param pulumi.Input[_builtins.bool] allow_instance_pool_create: Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
308
+ :param pulumi.Input[_builtins.str] application_id: This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
309
+ :param pulumi.Input[_builtins.bool] databricks_sql_access: This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
310
+ :param pulumi.Input[_builtins.bool] disable_as_user_deletion: Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
311
+ :param pulumi.Input[_builtins.str] display_name: This is an alias for the service principal and can be the full name of the service principal.
312
+ :param pulumi.Input[_builtins.str] external_id: ID of the service principal in an external identity provider.
313
+ :param pulumi.Input[_builtins.bool] force: Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
314
+ :param pulumi.Input[_builtins.bool] force_delete_home_dir: This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
315
+ :param pulumi.Input[_builtins.bool] force_delete_repos: This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
316
+ :param pulumi.Input[_builtins.str] home: Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
317
+ :param pulumi.Input[_builtins.str] repos: Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
318
+ :param pulumi.Input[_builtins.bool] workspace_access: This is a field to allow the service principal to have access to a Databricks Workspace.
319
+ :param pulumi.Input[_builtins.bool] workspace_consume: This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
321
320
  """
322
321
  if acl_principal_id is not None:
323
322
  pulumi.set(__self__, "acl_principal_id", acl_principal_id)
@@ -352,196 +351,196 @@ class _ServicePrincipalState:
352
351
  if workspace_consume is not None:
353
352
  pulumi.set(__self__, "workspace_consume", workspace_consume)
354
353
 
355
- @property
354
+ @_builtins.property
356
355
  @pulumi.getter(name="aclPrincipalId")
357
- def acl_principal_id(self) -> Optional[pulumi.Input[builtins.str]]:
356
+ def acl_principal_id(self) -> Optional[pulumi.Input[_builtins.str]]:
358
357
  """
359
358
  identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
360
359
  """
361
360
  return pulumi.get(self, "acl_principal_id")
362
361
 
363
362
  @acl_principal_id.setter
364
- def acl_principal_id(self, value: Optional[pulumi.Input[builtins.str]]):
363
+ def acl_principal_id(self, value: Optional[pulumi.Input[_builtins.str]]):
365
364
  pulumi.set(self, "acl_principal_id", value)
366
365
 
367
- @property
366
+ @_builtins.property
368
367
  @pulumi.getter
369
- def active(self) -> Optional[pulumi.Input[builtins.bool]]:
368
+ def active(self) -> Optional[pulumi.Input[_builtins.bool]]:
370
369
  """
371
370
  Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
372
371
  """
373
372
  return pulumi.get(self, "active")
374
373
 
375
374
  @active.setter
376
- def active(self, value: Optional[pulumi.Input[builtins.bool]]):
375
+ def active(self, value: Optional[pulumi.Input[_builtins.bool]]):
377
376
  pulumi.set(self, "active", value)
378
377
 
379
- @property
378
+ @_builtins.property
380
379
  @pulumi.getter(name="allowClusterCreate")
381
- def allow_cluster_create(self) -> Optional[pulumi.Input[builtins.bool]]:
380
+ def allow_cluster_create(self) -> Optional[pulumi.Input[_builtins.bool]]:
382
381
  """
383
382
  Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
384
383
  """
385
384
  return pulumi.get(self, "allow_cluster_create")
386
385
 
387
386
  @allow_cluster_create.setter
388
- def allow_cluster_create(self, value: Optional[pulumi.Input[builtins.bool]]):
387
+ def allow_cluster_create(self, value: Optional[pulumi.Input[_builtins.bool]]):
389
388
  pulumi.set(self, "allow_cluster_create", value)
390
389
 
391
- @property
390
+ @_builtins.property
392
391
  @pulumi.getter(name="allowInstancePoolCreate")
393
- def allow_instance_pool_create(self) -> Optional[pulumi.Input[builtins.bool]]:
392
+ def allow_instance_pool_create(self) -> Optional[pulumi.Input[_builtins.bool]]:
394
393
  """
395
394
  Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
396
395
  """
397
396
  return pulumi.get(self, "allow_instance_pool_create")
398
397
 
399
398
  @allow_instance_pool_create.setter
400
- def allow_instance_pool_create(self, value: Optional[pulumi.Input[builtins.bool]]):
399
+ def allow_instance_pool_create(self, value: Optional[pulumi.Input[_builtins.bool]]):
401
400
  pulumi.set(self, "allow_instance_pool_create", value)
402
401
 
403
- @property
402
+ @_builtins.property
404
403
  @pulumi.getter(name="applicationId")
405
- def application_id(self) -> Optional[pulumi.Input[builtins.str]]:
404
+ def application_id(self) -> Optional[pulumi.Input[_builtins.str]]:
406
405
  """
407
406
  This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
408
407
  """
409
408
  return pulumi.get(self, "application_id")
410
409
 
411
410
  @application_id.setter
412
- def application_id(self, value: Optional[pulumi.Input[builtins.str]]):
411
+ def application_id(self, value: Optional[pulumi.Input[_builtins.str]]):
413
412
  pulumi.set(self, "application_id", value)
414
413
 
415
- @property
414
+ @_builtins.property
416
415
  @pulumi.getter(name="databricksSqlAccess")
417
- def databricks_sql_access(self) -> Optional[pulumi.Input[builtins.bool]]:
416
+ def databricks_sql_access(self) -> Optional[pulumi.Input[_builtins.bool]]:
418
417
  """
419
418
  This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
420
419
  """
421
420
  return pulumi.get(self, "databricks_sql_access")
422
421
 
423
422
  @databricks_sql_access.setter
424
- def databricks_sql_access(self, value: Optional[pulumi.Input[builtins.bool]]):
423
+ def databricks_sql_access(self, value: Optional[pulumi.Input[_builtins.bool]]):
425
424
  pulumi.set(self, "databricks_sql_access", value)
426
425
 
427
- @property
426
+ @_builtins.property
428
427
  @pulumi.getter(name="disableAsUserDeletion")
429
- def disable_as_user_deletion(self) -> Optional[pulumi.Input[builtins.bool]]:
428
+ def disable_as_user_deletion(self) -> Optional[pulumi.Input[_builtins.bool]]:
430
429
  """
431
430
  Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
432
431
  """
433
432
  return pulumi.get(self, "disable_as_user_deletion")
434
433
 
435
434
  @disable_as_user_deletion.setter
436
- def disable_as_user_deletion(self, value: Optional[pulumi.Input[builtins.bool]]):
435
+ def disable_as_user_deletion(self, value: Optional[pulumi.Input[_builtins.bool]]):
437
436
  pulumi.set(self, "disable_as_user_deletion", value)
438
437
 
439
- @property
438
+ @_builtins.property
440
439
  @pulumi.getter(name="displayName")
441
- def display_name(self) -> Optional[pulumi.Input[builtins.str]]:
440
+ def display_name(self) -> Optional[pulumi.Input[_builtins.str]]:
442
441
  """
443
442
  This is an alias for the service principal and can be the full name of the service principal.
444
443
  """
445
444
  return pulumi.get(self, "display_name")
446
445
 
447
446
  @display_name.setter
448
- def display_name(self, value: Optional[pulumi.Input[builtins.str]]):
447
+ def display_name(self, value: Optional[pulumi.Input[_builtins.str]]):
449
448
  pulumi.set(self, "display_name", value)
450
449
 
451
- @property
450
+ @_builtins.property
452
451
  @pulumi.getter(name="externalId")
453
- def external_id(self) -> Optional[pulumi.Input[builtins.str]]:
452
+ def external_id(self) -> Optional[pulumi.Input[_builtins.str]]:
454
453
  """
455
454
  ID of the service principal in an external identity provider.
456
455
  """
457
456
  return pulumi.get(self, "external_id")
458
457
 
459
458
  @external_id.setter
460
- def external_id(self, value: Optional[pulumi.Input[builtins.str]]):
459
+ def external_id(self, value: Optional[pulumi.Input[_builtins.str]]):
461
460
  pulumi.set(self, "external_id", value)
462
461
 
463
- @property
462
+ @_builtins.property
464
463
  @pulumi.getter
465
- def force(self) -> Optional[pulumi.Input[builtins.bool]]:
464
+ def force(self) -> Optional[pulumi.Input[_builtins.bool]]:
466
465
  """
467
466
  Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
468
467
  """
469
468
  return pulumi.get(self, "force")
470
469
 
471
470
  @force.setter
472
- def force(self, value: Optional[pulumi.Input[builtins.bool]]):
471
+ def force(self, value: Optional[pulumi.Input[_builtins.bool]]):
473
472
  pulumi.set(self, "force", value)
474
473
 
475
- @property
474
+ @_builtins.property
476
475
  @pulumi.getter(name="forceDeleteHomeDir")
477
- def force_delete_home_dir(self) -> Optional[pulumi.Input[builtins.bool]]:
476
+ def force_delete_home_dir(self) -> Optional[pulumi.Input[_builtins.bool]]:
478
477
  """
479
478
  This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
480
479
  """
481
480
  return pulumi.get(self, "force_delete_home_dir")
482
481
 
483
482
  @force_delete_home_dir.setter
484
- def force_delete_home_dir(self, value: Optional[pulumi.Input[builtins.bool]]):
483
+ def force_delete_home_dir(self, value: Optional[pulumi.Input[_builtins.bool]]):
485
484
  pulumi.set(self, "force_delete_home_dir", value)
486
485
 
487
- @property
486
+ @_builtins.property
488
487
  @pulumi.getter(name="forceDeleteRepos")
489
- def force_delete_repos(self) -> Optional[pulumi.Input[builtins.bool]]:
488
+ def force_delete_repos(self) -> Optional[pulumi.Input[_builtins.bool]]:
490
489
  """
491
490
  This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
492
491
  """
493
492
  return pulumi.get(self, "force_delete_repos")
494
493
 
495
494
  @force_delete_repos.setter
496
- def force_delete_repos(self, value: Optional[pulumi.Input[builtins.bool]]):
495
+ def force_delete_repos(self, value: Optional[pulumi.Input[_builtins.bool]]):
497
496
  pulumi.set(self, "force_delete_repos", value)
498
497
 
499
- @property
498
+ @_builtins.property
500
499
  @pulumi.getter
501
- def home(self) -> Optional[pulumi.Input[builtins.str]]:
500
+ def home(self) -> Optional[pulumi.Input[_builtins.str]]:
502
501
  """
503
502
  Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
504
503
  """
505
504
  return pulumi.get(self, "home")
506
505
 
507
506
  @home.setter
508
- def home(self, value: Optional[pulumi.Input[builtins.str]]):
507
+ def home(self, value: Optional[pulumi.Input[_builtins.str]]):
509
508
  pulumi.set(self, "home", value)
510
509
 
511
- @property
510
+ @_builtins.property
512
511
  @pulumi.getter
513
- def repos(self) -> Optional[pulumi.Input[builtins.str]]:
512
+ def repos(self) -> Optional[pulumi.Input[_builtins.str]]:
514
513
  """
515
514
  Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
516
515
  """
517
516
  return pulumi.get(self, "repos")
518
517
 
519
518
  @repos.setter
520
- def repos(self, value: Optional[pulumi.Input[builtins.str]]):
519
+ def repos(self, value: Optional[pulumi.Input[_builtins.str]]):
521
520
  pulumi.set(self, "repos", value)
522
521
 
523
- @property
522
+ @_builtins.property
524
523
  @pulumi.getter(name="workspaceAccess")
525
- def workspace_access(self) -> Optional[pulumi.Input[builtins.bool]]:
524
+ def workspace_access(self) -> Optional[pulumi.Input[_builtins.bool]]:
526
525
  """
527
526
  This is a field to allow the service principal to have access to a Databricks Workspace.
528
527
  """
529
528
  return pulumi.get(self, "workspace_access")
530
529
 
531
530
  @workspace_access.setter
532
- def workspace_access(self, value: Optional[pulumi.Input[builtins.bool]]):
531
+ def workspace_access(self, value: Optional[pulumi.Input[_builtins.bool]]):
533
532
  pulumi.set(self, "workspace_access", value)
534
533
 
535
- @property
534
+ @_builtins.property
536
535
  @pulumi.getter(name="workspaceConsume")
537
- def workspace_consume(self) -> Optional[pulumi.Input[builtins.bool]]:
536
+ def workspace_consume(self) -> Optional[pulumi.Input[_builtins.bool]]:
538
537
  """
539
538
  This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
540
539
  """
541
540
  return pulumi.get(self, "workspace_consume")
542
541
 
543
542
  @workspace_consume.setter
544
- def workspace_consume(self, value: Optional[pulumi.Input[builtins.bool]]):
543
+ def workspace_consume(self, value: Optional[pulumi.Input[_builtins.bool]]):
545
544
  pulumi.set(self, "workspace_consume", value)
546
545
 
547
546
 
@@ -551,22 +550,22 @@ class ServicePrincipal(pulumi.CustomResource):
551
550
  def __init__(__self__,
552
551
  resource_name: str,
553
552
  opts: Optional[pulumi.ResourceOptions] = None,
554
- acl_principal_id: Optional[pulumi.Input[builtins.str]] = None,
555
- active: Optional[pulumi.Input[builtins.bool]] = None,
556
- allow_cluster_create: Optional[pulumi.Input[builtins.bool]] = None,
557
- allow_instance_pool_create: Optional[pulumi.Input[builtins.bool]] = None,
558
- application_id: Optional[pulumi.Input[builtins.str]] = None,
559
- databricks_sql_access: Optional[pulumi.Input[builtins.bool]] = None,
560
- disable_as_user_deletion: Optional[pulumi.Input[builtins.bool]] = None,
561
- display_name: Optional[pulumi.Input[builtins.str]] = None,
562
- external_id: Optional[pulumi.Input[builtins.str]] = None,
563
- force: Optional[pulumi.Input[builtins.bool]] = None,
564
- force_delete_home_dir: Optional[pulumi.Input[builtins.bool]] = None,
565
- force_delete_repos: Optional[pulumi.Input[builtins.bool]] = None,
566
- home: Optional[pulumi.Input[builtins.str]] = None,
567
- repos: Optional[pulumi.Input[builtins.str]] = None,
568
- workspace_access: Optional[pulumi.Input[builtins.bool]] = None,
569
- workspace_consume: Optional[pulumi.Input[builtins.bool]] = None,
553
+ acl_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
554
+ active: Optional[pulumi.Input[_builtins.bool]] = None,
555
+ allow_cluster_create: Optional[pulumi.Input[_builtins.bool]] = None,
556
+ allow_instance_pool_create: Optional[pulumi.Input[_builtins.bool]] = None,
557
+ application_id: Optional[pulumi.Input[_builtins.str]] = None,
558
+ databricks_sql_access: Optional[pulumi.Input[_builtins.bool]] = None,
559
+ disable_as_user_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
560
+ display_name: Optional[pulumi.Input[_builtins.str]] = None,
561
+ external_id: Optional[pulumi.Input[_builtins.str]] = None,
562
+ force: Optional[pulumi.Input[_builtins.bool]] = None,
563
+ force_delete_home_dir: Optional[pulumi.Input[_builtins.bool]] = None,
564
+ force_delete_repos: Optional[pulumi.Input[_builtins.bool]] = None,
565
+ home: Optional[pulumi.Input[_builtins.str]] = None,
566
+ repos: Optional[pulumi.Input[_builtins.str]] = None,
567
+ workspace_access: Optional[pulumi.Input[_builtins.bool]] = None,
568
+ workspace_consume: Optional[pulumi.Input[_builtins.bool]] = None,
570
569
  __props__=None):
571
570
  """
572
571
  Directly manage [Service Principals](https://docs.databricks.com/administration-guide/users-groups/service-principals.html) that could be added to Group in Databricks account or workspace.
@@ -643,11 +642,12 @@ class ServicePrincipal(pulumi.CustomResource):
643
642
  The following resources are often used in the same context:
644
643
 
645
644
  * End to end workspace management guide.
646
- * Group to manage [groups in Databricks Workspace](https://docs.databricks.com/administration-guide/users-groups/groups.html) or [Account Console](https://accounts.cloud.databricks.com/) (for AWS deployments).
645
+ * Group to manage [Account-level](https://docs.databricks.com/aws/en/admin/users-groups/groups) or [Workspace-level](https://docs.databricks.com/aws/en/admin/users-groups/workspace-local-groups) groups.
647
646
  * Group data to retrieve information about Group members, entitlements and instance profiles.
648
647
  * GroupMember to attach users and groups as group members.
649
648
  * Permissions to manage [access control](https://docs.databricks.com/security/access-control/index.html) in Databricks workspace.
650
- * SqlPermissions to manage data object access control lists in Databricks workspaces for things like tables, views, databases, and more to manage secrets for the service principal (only for AWS deployments)
649
+ * Grants to manage data access in Unity Catalog.
650
+ * ServicePrincipalSecret to manage secrets for a service principal.
651
651
 
652
652
  ## Import
653
653
 
@@ -673,22 +673,22 @@ class ServicePrincipal(pulumi.CustomResource):
673
673
 
674
674
  :param str resource_name: The name of the resource.
675
675
  :param pulumi.ResourceOptions opts: Options for the resource.
676
- :param pulumi.Input[builtins.str] acl_principal_id: identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
677
- :param pulumi.Input[builtins.bool] active: Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
678
- :param pulumi.Input[builtins.bool] allow_cluster_create: Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
679
- :param pulumi.Input[builtins.bool] allow_instance_pool_create: Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
680
- :param pulumi.Input[builtins.str] application_id: This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
681
- :param pulumi.Input[builtins.bool] databricks_sql_access: This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
682
- :param pulumi.Input[builtins.bool] disable_as_user_deletion: Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
683
- :param pulumi.Input[builtins.str] display_name: This is an alias for the service principal and can be the full name of the service principal.
684
- :param pulumi.Input[builtins.str] external_id: ID of the service principal in an external identity provider.
685
- :param pulumi.Input[builtins.bool] force: Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
686
- :param pulumi.Input[builtins.bool] force_delete_home_dir: This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
687
- :param pulumi.Input[builtins.bool] force_delete_repos: This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
688
- :param pulumi.Input[builtins.str] home: Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
689
- :param pulumi.Input[builtins.str] repos: Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
690
- :param pulumi.Input[builtins.bool] workspace_access: This is a field to allow the service principal to have access to a Databricks Workspace.
691
- :param pulumi.Input[builtins.bool] workspace_consume: This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
676
+ :param pulumi.Input[_builtins.str] acl_principal_id: identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
677
+ :param pulumi.Input[_builtins.bool] active: Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
678
+ :param pulumi.Input[_builtins.bool] allow_cluster_create: Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
679
+ :param pulumi.Input[_builtins.bool] allow_instance_pool_create: Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
680
+ :param pulumi.Input[_builtins.str] application_id: This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
681
+ :param pulumi.Input[_builtins.bool] databricks_sql_access: This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
682
+ :param pulumi.Input[_builtins.bool] disable_as_user_deletion: Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
683
+ :param pulumi.Input[_builtins.str] display_name: This is an alias for the service principal and can be the full name of the service principal.
684
+ :param pulumi.Input[_builtins.str] external_id: ID of the service principal in an external identity provider.
685
+ :param pulumi.Input[_builtins.bool] force: Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
686
+ :param pulumi.Input[_builtins.bool] force_delete_home_dir: This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
687
+ :param pulumi.Input[_builtins.bool] force_delete_repos: This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
688
+ :param pulumi.Input[_builtins.str] home: Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
689
+ :param pulumi.Input[_builtins.str] repos: Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
690
+ :param pulumi.Input[_builtins.bool] workspace_access: This is a field to allow the service principal to have access to a Databricks Workspace.
691
+ :param pulumi.Input[_builtins.bool] workspace_consume: This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
692
692
  """
693
693
  ...
694
694
  @overload
@@ -771,11 +771,12 @@ class ServicePrincipal(pulumi.CustomResource):
771
771
  The following resources are often used in the same context:
772
772
 
773
773
  * End to end workspace management guide.
774
- * Group to manage [groups in Databricks Workspace](https://docs.databricks.com/administration-guide/users-groups/groups.html) or [Account Console](https://accounts.cloud.databricks.com/) (for AWS deployments).
774
+ * Group to manage [Account-level](https://docs.databricks.com/aws/en/admin/users-groups/groups) or [Workspace-level](https://docs.databricks.com/aws/en/admin/users-groups/workspace-local-groups) groups.
775
775
  * Group data to retrieve information about Group members, entitlements and instance profiles.
776
776
  * GroupMember to attach users and groups as group members.
777
777
  * Permissions to manage [access control](https://docs.databricks.com/security/access-control/index.html) in Databricks workspace.
778
- * SqlPermissions to manage data object access control lists in Databricks workspaces for things like tables, views, databases, and more to manage secrets for the service principal (only for AWS deployments)
778
+ * Grants to manage data access in Unity Catalog.
779
+ * ServicePrincipalSecret to manage secrets for a service principal.
779
780
 
780
781
  ## Import
781
782
 
@@ -814,22 +815,22 @@ class ServicePrincipal(pulumi.CustomResource):
814
815
  def _internal_init(__self__,
815
816
  resource_name: str,
816
817
  opts: Optional[pulumi.ResourceOptions] = None,
817
- acl_principal_id: Optional[pulumi.Input[builtins.str]] = None,
818
- active: Optional[pulumi.Input[builtins.bool]] = None,
819
- allow_cluster_create: Optional[pulumi.Input[builtins.bool]] = None,
820
- allow_instance_pool_create: Optional[pulumi.Input[builtins.bool]] = None,
821
- application_id: Optional[pulumi.Input[builtins.str]] = None,
822
- databricks_sql_access: Optional[pulumi.Input[builtins.bool]] = None,
823
- disable_as_user_deletion: Optional[pulumi.Input[builtins.bool]] = None,
824
- display_name: Optional[pulumi.Input[builtins.str]] = None,
825
- external_id: Optional[pulumi.Input[builtins.str]] = None,
826
- force: Optional[pulumi.Input[builtins.bool]] = None,
827
- force_delete_home_dir: Optional[pulumi.Input[builtins.bool]] = None,
828
- force_delete_repos: Optional[pulumi.Input[builtins.bool]] = None,
829
- home: Optional[pulumi.Input[builtins.str]] = None,
830
- repos: Optional[pulumi.Input[builtins.str]] = None,
831
- workspace_access: Optional[pulumi.Input[builtins.bool]] = None,
832
- workspace_consume: Optional[pulumi.Input[builtins.bool]] = None,
818
+ acl_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
819
+ active: Optional[pulumi.Input[_builtins.bool]] = None,
820
+ allow_cluster_create: Optional[pulumi.Input[_builtins.bool]] = None,
821
+ allow_instance_pool_create: Optional[pulumi.Input[_builtins.bool]] = None,
822
+ application_id: Optional[pulumi.Input[_builtins.str]] = None,
823
+ databricks_sql_access: Optional[pulumi.Input[_builtins.bool]] = None,
824
+ disable_as_user_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
825
+ display_name: Optional[pulumi.Input[_builtins.str]] = None,
826
+ external_id: Optional[pulumi.Input[_builtins.str]] = None,
827
+ force: Optional[pulumi.Input[_builtins.bool]] = None,
828
+ force_delete_home_dir: Optional[pulumi.Input[_builtins.bool]] = None,
829
+ force_delete_repos: Optional[pulumi.Input[_builtins.bool]] = None,
830
+ home: Optional[pulumi.Input[_builtins.str]] = None,
831
+ repos: Optional[pulumi.Input[_builtins.str]] = None,
832
+ workspace_access: Optional[pulumi.Input[_builtins.bool]] = None,
833
+ workspace_consume: Optional[pulumi.Input[_builtins.bool]] = None,
833
834
  __props__=None):
834
835
  opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
835
836
  if not isinstance(opts, pulumi.ResourceOptions):
@@ -865,22 +866,22 @@ class ServicePrincipal(pulumi.CustomResource):
865
866
  def get(resource_name: str,
866
867
  id: pulumi.Input[str],
867
868
  opts: Optional[pulumi.ResourceOptions] = None,
868
- acl_principal_id: Optional[pulumi.Input[builtins.str]] = None,
869
- active: Optional[pulumi.Input[builtins.bool]] = None,
870
- allow_cluster_create: Optional[pulumi.Input[builtins.bool]] = None,
871
- allow_instance_pool_create: Optional[pulumi.Input[builtins.bool]] = None,
872
- application_id: Optional[pulumi.Input[builtins.str]] = None,
873
- databricks_sql_access: Optional[pulumi.Input[builtins.bool]] = None,
874
- disable_as_user_deletion: Optional[pulumi.Input[builtins.bool]] = None,
875
- display_name: Optional[pulumi.Input[builtins.str]] = None,
876
- external_id: Optional[pulumi.Input[builtins.str]] = None,
877
- force: Optional[pulumi.Input[builtins.bool]] = None,
878
- force_delete_home_dir: Optional[pulumi.Input[builtins.bool]] = None,
879
- force_delete_repos: Optional[pulumi.Input[builtins.bool]] = None,
880
- home: Optional[pulumi.Input[builtins.str]] = None,
881
- repos: Optional[pulumi.Input[builtins.str]] = None,
882
- workspace_access: Optional[pulumi.Input[builtins.bool]] = None,
883
- workspace_consume: Optional[pulumi.Input[builtins.bool]] = None) -> 'ServicePrincipal':
869
+ acl_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
870
+ active: Optional[pulumi.Input[_builtins.bool]] = None,
871
+ allow_cluster_create: Optional[pulumi.Input[_builtins.bool]] = None,
872
+ allow_instance_pool_create: Optional[pulumi.Input[_builtins.bool]] = None,
873
+ application_id: Optional[pulumi.Input[_builtins.str]] = None,
874
+ databricks_sql_access: Optional[pulumi.Input[_builtins.bool]] = None,
875
+ disable_as_user_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
876
+ display_name: Optional[pulumi.Input[_builtins.str]] = None,
877
+ external_id: Optional[pulumi.Input[_builtins.str]] = None,
878
+ force: Optional[pulumi.Input[_builtins.bool]] = None,
879
+ force_delete_home_dir: Optional[pulumi.Input[_builtins.bool]] = None,
880
+ force_delete_repos: Optional[pulumi.Input[_builtins.bool]] = None,
881
+ home: Optional[pulumi.Input[_builtins.str]] = None,
882
+ repos: Optional[pulumi.Input[_builtins.str]] = None,
883
+ workspace_access: Optional[pulumi.Input[_builtins.bool]] = None,
884
+ workspace_consume: Optional[pulumi.Input[_builtins.bool]] = None) -> 'ServicePrincipal':
884
885
  """
885
886
  Get an existing ServicePrincipal resource's state with the given name, id, and optional extra
886
887
  properties used to qualify the lookup.
@@ -888,22 +889,22 @@ class ServicePrincipal(pulumi.CustomResource):
888
889
  :param str resource_name: The unique name of the resulting resource.
889
890
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
890
891
  :param pulumi.ResourceOptions opts: Options for the resource.
891
- :param pulumi.Input[builtins.str] acl_principal_id: identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
892
- :param pulumi.Input[builtins.bool] active: Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
893
- :param pulumi.Input[builtins.bool] allow_cluster_create: Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
894
- :param pulumi.Input[builtins.bool] allow_instance_pool_create: Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
895
- :param pulumi.Input[builtins.str] application_id: This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
896
- :param pulumi.Input[builtins.bool] databricks_sql_access: This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
897
- :param pulumi.Input[builtins.bool] disable_as_user_deletion: Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
898
- :param pulumi.Input[builtins.str] display_name: This is an alias for the service principal and can be the full name of the service principal.
899
- :param pulumi.Input[builtins.str] external_id: ID of the service principal in an external identity provider.
900
- :param pulumi.Input[builtins.bool] force: Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
901
- :param pulumi.Input[builtins.bool] force_delete_home_dir: This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
902
- :param pulumi.Input[builtins.bool] force_delete_repos: This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
903
- :param pulumi.Input[builtins.str] home: Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
904
- :param pulumi.Input[builtins.str] repos: Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
905
- :param pulumi.Input[builtins.bool] workspace_access: This is a field to allow the service principal to have access to a Databricks Workspace.
906
- :param pulumi.Input[builtins.bool] workspace_consume: This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
892
+ :param pulumi.Input[_builtins.str] acl_principal_id: identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
893
+ :param pulumi.Input[_builtins.bool] active: Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
894
+ :param pulumi.Input[_builtins.bool] allow_cluster_create: Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
895
+ :param pulumi.Input[_builtins.bool] allow_instance_pool_create: Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
896
+ :param pulumi.Input[_builtins.str] application_id: This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
897
+ :param pulumi.Input[_builtins.bool] databricks_sql_access: This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
898
+ :param pulumi.Input[_builtins.bool] disable_as_user_deletion: Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
899
+ :param pulumi.Input[_builtins.str] display_name: This is an alias for the service principal and can be the full name of the service principal.
900
+ :param pulumi.Input[_builtins.str] external_id: ID of the service principal in an external identity provider.
901
+ :param pulumi.Input[_builtins.bool] force: Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
902
+ :param pulumi.Input[_builtins.bool] force_delete_home_dir: This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
903
+ :param pulumi.Input[_builtins.bool] force_delete_repos: This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
904
+ :param pulumi.Input[_builtins.str] home: Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
905
+ :param pulumi.Input[_builtins.str] repos: Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
906
+ :param pulumi.Input[_builtins.bool] workspace_access: This is a field to allow the service principal to have access to a Databricks Workspace.
907
+ :param pulumi.Input[_builtins.bool] workspace_consume: This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
907
908
  """
908
909
  opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
909
910
 
@@ -927,129 +928,129 @@ class ServicePrincipal(pulumi.CustomResource):
927
928
  __props__.__dict__["workspace_consume"] = workspace_consume
928
929
  return ServicePrincipal(resource_name, opts=opts, __props__=__props__)
929
930
 
930
- @property
931
+ @_builtins.property
931
932
  @pulumi.getter(name="aclPrincipalId")
932
- def acl_principal_id(self) -> pulumi.Output[builtins.str]:
933
+ def acl_principal_id(self) -> pulumi.Output[_builtins.str]:
933
934
  """
934
935
  identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
935
936
  """
936
937
  return pulumi.get(self, "acl_principal_id")
937
938
 
938
- @property
939
+ @_builtins.property
939
940
  @pulumi.getter
940
- def active(self) -> pulumi.Output[Optional[builtins.bool]]:
941
+ def active(self) -> pulumi.Output[Optional[_builtins.bool]]:
941
942
  """
942
943
  Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
943
944
  """
944
945
  return pulumi.get(self, "active")
945
946
 
946
- @property
947
+ @_builtins.property
947
948
  @pulumi.getter(name="allowClusterCreate")
948
- def allow_cluster_create(self) -> pulumi.Output[Optional[builtins.bool]]:
949
+ def allow_cluster_create(self) -> pulumi.Output[Optional[_builtins.bool]]:
949
950
  """
950
951
  Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
951
952
  """
952
953
  return pulumi.get(self, "allow_cluster_create")
953
954
 
954
- @property
955
+ @_builtins.property
955
956
  @pulumi.getter(name="allowInstancePoolCreate")
956
- def allow_instance_pool_create(self) -> pulumi.Output[Optional[builtins.bool]]:
957
+ def allow_instance_pool_create(self) -> pulumi.Output[Optional[_builtins.bool]]:
957
958
  """
958
959
  Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
959
960
  """
960
961
  return pulumi.get(self, "allow_instance_pool_create")
961
962
 
962
- @property
963
+ @_builtins.property
963
964
  @pulumi.getter(name="applicationId")
964
- def application_id(self) -> pulumi.Output[builtins.str]:
965
+ def application_id(self) -> pulumi.Output[_builtins.str]:
965
966
  """
966
967
  This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
967
968
  """
968
969
  return pulumi.get(self, "application_id")
969
970
 
970
- @property
971
+ @_builtins.property
971
972
  @pulumi.getter(name="databricksSqlAccess")
972
- def databricks_sql_access(self) -> pulumi.Output[Optional[builtins.bool]]:
973
+ def databricks_sql_access(self) -> pulumi.Output[Optional[_builtins.bool]]:
973
974
  """
974
975
  This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
975
976
  """
976
977
  return pulumi.get(self, "databricks_sql_access")
977
978
 
978
- @property
979
+ @_builtins.property
979
980
  @pulumi.getter(name="disableAsUserDeletion")
980
- def disable_as_user_deletion(self) -> pulumi.Output[Optional[builtins.bool]]:
981
+ def disable_as_user_deletion(self) -> pulumi.Output[Optional[_builtins.bool]]:
981
982
  """
982
983
  Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
983
984
  """
984
985
  return pulumi.get(self, "disable_as_user_deletion")
985
986
 
986
- @property
987
+ @_builtins.property
987
988
  @pulumi.getter(name="displayName")
988
- def display_name(self) -> pulumi.Output[builtins.str]:
989
+ def display_name(self) -> pulumi.Output[_builtins.str]:
989
990
  """
990
991
  This is an alias for the service principal and can be the full name of the service principal.
991
992
  """
992
993
  return pulumi.get(self, "display_name")
993
994
 
994
- @property
995
+ @_builtins.property
995
996
  @pulumi.getter(name="externalId")
996
- def external_id(self) -> pulumi.Output[Optional[builtins.str]]:
997
+ def external_id(self) -> pulumi.Output[Optional[_builtins.str]]:
997
998
  """
998
999
  ID of the service principal in an external identity provider.
999
1000
  """
1000
1001
  return pulumi.get(self, "external_id")
1001
1002
 
1002
- @property
1003
+ @_builtins.property
1003
1004
  @pulumi.getter
1004
- def force(self) -> pulumi.Output[Optional[builtins.bool]]:
1005
+ def force(self) -> pulumi.Output[Optional[_builtins.bool]]:
1005
1006
  """
1006
1007
  Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
1007
1008
  """
1008
1009
  return pulumi.get(self, "force")
1009
1010
 
1010
- @property
1011
+ @_builtins.property
1011
1012
  @pulumi.getter(name="forceDeleteHomeDir")
1012
- def force_delete_home_dir(self) -> pulumi.Output[Optional[builtins.bool]]:
1013
+ def force_delete_home_dir(self) -> pulumi.Output[Optional[_builtins.bool]]:
1013
1014
  """
1014
1015
  This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
1015
1016
  """
1016
1017
  return pulumi.get(self, "force_delete_home_dir")
1017
1018
 
1018
- @property
1019
+ @_builtins.property
1019
1020
  @pulumi.getter(name="forceDeleteRepos")
1020
- def force_delete_repos(self) -> pulumi.Output[Optional[builtins.bool]]:
1021
+ def force_delete_repos(self) -> pulumi.Output[Optional[_builtins.bool]]:
1021
1022
  """
1022
1023
  This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
1023
1024
  """
1024
1025
  return pulumi.get(self, "force_delete_repos")
1025
1026
 
1026
- @property
1027
+ @_builtins.property
1027
1028
  @pulumi.getter
1028
- def home(self) -> pulumi.Output[builtins.str]:
1029
+ def home(self) -> pulumi.Output[_builtins.str]:
1029
1030
  """
1030
1031
  Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
1031
1032
  """
1032
1033
  return pulumi.get(self, "home")
1033
1034
 
1034
- @property
1035
+ @_builtins.property
1035
1036
  @pulumi.getter
1036
- def repos(self) -> pulumi.Output[builtins.str]:
1037
+ def repos(self) -> pulumi.Output[_builtins.str]:
1037
1038
  """
1038
1039
  Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
1039
1040
  """
1040
1041
  return pulumi.get(self, "repos")
1041
1042
 
1042
- @property
1043
+ @_builtins.property
1043
1044
  @pulumi.getter(name="workspaceAccess")
1044
- def workspace_access(self) -> pulumi.Output[Optional[builtins.bool]]:
1045
+ def workspace_access(self) -> pulumi.Output[Optional[_builtins.bool]]:
1045
1046
  """
1046
1047
  This is a field to allow the service principal to have access to a Databricks Workspace.
1047
1048
  """
1048
1049
  return pulumi.get(self, "workspace_access")
1049
1050
 
1050
- @property
1051
+ @_builtins.property
1051
1052
  @pulumi.getter(name="workspaceConsume")
1052
- def workspace_consume(self) -> pulumi.Output[Optional[builtins.bool]]:
1053
+ def workspace_consume(self) -> pulumi.Output[Optional[_builtins.bool]]:
1053
1054
  """
1054
1055
  This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
1055
1056
  """