Skip to content

README.md

Latest commit

 

History

History
68 lines (49 loc) · 3.45 KB

README.md

File metadata and controls

68 lines (49 loc) · 3.45 KB

GenieRails — Azure

On AWS? Go to ../aws/README.md instead.

Prerequisites

  • Your tables must already exist in Unity Catalog before running make generate
  • An Azure Databricks workspace with Unity Catalog enabled
  • A Databricks service principal with the roles below
  • For Azure-specific resource setup (Azure AD App Registration, RBAC roles, storage accounts), see Azure Prerequisites

Which service principal roles do I need?

Mode Role Why it's needed
Full (default) Account Admin Create groups, assign groups to workspaces, manage group membership
Full (default) Workspace Admin Grant entitlements, create warehouses, manage Genie Spaces and permissions
Full (default) Metastore Admin Create tag policies, FGAC policies, grants, and masking functions
Genie-only Workspace USER + Databricks SQL access entitlement Create Genie Spaces only — set genie_only = true and provide sql_warehouse_id in env.auto.tfvars. No admin roles needed.

Step 1 — Set up your environment

cd azure/     # always run from here, never from shared/
make setup

This creates envs/dev/ with two template files for you to fill in.

Step 2 — Fill in credentials

Edit envs/dev/auth.auto.tfvars:

databricks_account_id     = "your-account-id"
databricks_account_host   = "https://accounts.azuredatabricks.net"
databricks_client_id      = "your-sp-client-id"
databricks_client_secret  = "your-sp-secret"
databricks_workspace_id   = "your-workspace-id"
databricks_workspace_host = "https://adb-1234567890.12.azuredatabricks.net"

Azure-specific URLs: Both URLs differ from AWS and must be set explicitly.

  • databricks_account_host must be accounts.azuredatabricks.net (the Terraform provider default is the AWS URL)
  • databricks_workspace_host uses the Azure format: adb-<workspace-id>.<region-id>.azuredatabricks.net

Step 3 — Follow the guide for your scenario

Starting point You have... Guide
I already have a Genie Space A space configured in the Databricks UI that needs governance and promotion to prod From UI to Production
I'm starting from scratch Tables in Unity Catalog, no Genie Space yet Quickstart

Want to see it in action first?

The Australian Bank Demo provisions a complete environment and walks through the full GenieRails flow in ~20 minutes — ANZ-specific masking, PCI compliance, AML row filters, and dev-to-prod promotion. Works on both AWS and Azure.

Documentation