com.databricks.sdk.service.iam

Interface AccountAccessControlService

@Generated
public interface AccountAccessControlService

These APIs manage access rules on resources in an account. Currently, only grant rules are supported. A grant rule specifies a role assigned to a set of principals. A list of rules attached to a resource is called a rule set.

This is the high-level interface, that contains generated methods.

Evolving: this interface is under development. Method signatures may change.

Method Summary

Modifier and Type	Method and Description
GetAssignableRolesForResourceResponse	getAssignableRolesForResource(GetAssignableRolesForResourceRequest getAssignableRolesForResourceRequest) Get assignable roles for a resource.
RuleSetResponse	getRuleSet(GetRuleSetRequest getRuleSetRequest) Get a rule set.
RuleSetResponse	updateRuleSet(UpdateRuleSetRequest updateRuleSetRequest) Update a rule set.

Method Detail

getAssignableRolesForResource

GetAssignableRolesForResourceResponse getAssignableRolesForResource(GetAssignableRolesForResourceRequest getAssignableRolesForResourceRequest)

Get assignable roles for a resource.

Gets all the roles that can be granted on an account level resource. A role is grantable if the rule set on the resource can contain an access rule of the role.

getRuleSet

RuleSetResponse getRuleSet(GetRuleSetRequest getRuleSetRequest)

Get a rule set.

Get a rule set by its name. A rule set is always attached to a resource and contains a list of access rules on the said resource. Currently only a default rule set for each resource is supported.

updateRuleSet

RuleSetResponse updateRuleSet(UpdateRuleSetRequest updateRuleSetRequest)

Update a rule set.

Replace the rules of a rule set. First, use get to read the current version of the rule set before modifying it. This pattern helps prevent conflicts between concurrent updates.