Workspace access for Azure Databricks personnel

  • Article

Azure Databricks personnel cannot access customer workspaces or the production multi-tenant environments without customer consent. If you raise a support request, you can grant Azure Databricks personnel temporary access to your workspaces in order to investigate an outage or security event, or to support your deployment.

Azure Databricks technology controls enforce the following in such scenarios:

  • Limited personnel can request production access to resolve an engineering support ticket or a customer-reported issue.
  • Time limits are set in advance to the expected duration of the support session.
  • You can configure workspace diagnostic logs to review Azure Databricks personnel access to your workspace's resources. Logs are delivered in typically under 15 minutes.
  • You configure workspace access for Databricks personnel to disallow workspace access for Azure Databricks personnel or temporarily approve access to your workspace for only the duration of the support session.

Control workspace access for Azure Databricks personnel

Workspace admins can grant Azure Databricks personnel access to their workspace for a temporary session.

Configure workspace access for your workspace

  1. As a workspace admin, go to the settings page.
  2. Click the Advanced tab.
  3. In the Access Control section, toggle Workspace access for Azure Databricks personnel to enable or disable access.
    1. For the Enabled option, enter the number of hours to allow access to your workspace. Sessions can last up to 48 hours. You can also choose to always allow access.
    2. For the Not enabled option, confirm that you intend to disallow workspace access for Azure Databricks personnel.

When access is enabled, you can track the expiration time of access in the Access Control section. You can also choose to disallow workspace access for Azure Databricks personnel before the expiration time is up.