com.databricks.sdk.service.iam

Interface AccountAccessControlProxyService

@Generated
public interface AccountAccessControlProxyService

These APIs manage access rules on resources in an account. Currently, only grant rules are supported. A grant rule specifies a role assigned to a set of principals. A list of rules attached to a resource is called a rule set. A workspace must belong to an account for these APIs to work

This is the high-level interface, that contains generated methods.

Evolving: this interface is under development. Method signatures may change.

Method Summary

Modifier and Type	Method and Description
GetAssignableRolesForResourceResponse	getAssignableRolesForResource(GetAssignableRolesForResourceRequest getAssignableRolesForResourceRequest) Gets all the roles that can be granted on an account level resource.
RuleSetResponse	getRuleSet(GetRuleSetRequest getRuleSetRequest) Get a rule set by its name.
RuleSetResponse	updateRuleSet(UpdateRuleSetRequest updateRuleSetRequest) Replace the rules of a rule set.

Method Detail

getAssignableRolesForResource

GetAssignableRolesForResourceResponse getAssignableRolesForResource(GetAssignableRolesForResourceRequest getAssignableRolesForResourceRequest)

Gets all the roles that can be granted on an account level resource. A role is grantable if the rule set on the resource can contain an access rule of the role.

getRuleSet

RuleSetResponse getRuleSet(GetRuleSetRequest getRuleSetRequest)

Get a rule set by its name. A rule set is always attached to a resource and contains a list of access rules on the said resource. Currently only a default rule set for each resource is supported.

updateRuleSet

RuleSetResponse updateRuleSet(UpdateRuleSetRequest updateRuleSetRequest)

Replace the rules of a rule set. First, use get to read the current version of the rule set before modifying it. This pattern helps prevent conflicts between concurrent updates.