rfa command group

The rfa (Request for Access) command group within the Databricks CLI contains commands to enable users to request access for Unity Catalog securables. These commands provide a standardized way for securable owners (or users with MANAGE privileges) to manage access request destinations.

databricks rfa batch-create-access-requests

Create access requests for Unity Catalog permissions for a specified principal on a securable object. This Batch API can take in multiple principals, securable objects, and permissions as the input and returns the access request destinations for each. Principals must be unique across the API call.

The supported securable types are: metastore, catalog, schema, table, external_location, connection, credential, function, registered_model, and volume.

databricks rfa batch-create-access-requests [flags]

Options

--json JSON

    The inline JSON string or the @path to the JSON file with the request body

Global flags

Examples

The following example creates multiple access requests using JSON:

databricks rfa batch-create-access-requests --json '{"requests": [{"principal": "user@example.com", "securable_type": "catalog", "securable_full_name": "my_catalog", "permissions": ["USE_CATALOG", "USE_SCHEMA"]}]}'

The following example creates access requests using a JSON file:

databricks rfa batch-create-access-requests --json @access-requests.json

databricks rfa get-access-request-destinations

Get access request destinations for the specified securable. Any caller can see URL destinations or the destinations on the metastore. Otherwise, only those with BROWSE permissions on the securable can see destinations.

The supported securable types are: metastore, catalog, schema, table, external_location, connection, credential, function, registered_model, and volume.

databricks rfa get-access-request-destinations SECURABLE_TYPE FULL_NAME [flags]

Arguments

SECURABLE_TYPE

    The type of the securable.

FULL_NAME

    The full name of the securable.

Options