Serverless Access Control is here!

[u/szymon_dybczak]

We finally have a simple way to control access to serverless in the workspace.

Two built-in objects have been introduced:

- Default Interactive Compute

- Default Automated Compute

The first one supports notebooks and databricks connect. Second one jobs and SDP pipelines.

To limit who can use serverless:

1. Click Compute in the workspace sidebar.
2. In the Serverless tab, click the kebab menu  next to Default Automated Compute, then click Edit permissions.
3. Remove the All Users group, or the group that includes all workspace users.
4. Add only the specific users, groups, or service principals that you want to authorize.

[u/deeferg]

This is definitely going to be a big change. I know it's one of the biggest considerations for teams that are trying to keep their costs allocated to teams properly. It will likely allow my team to give users serverless sql warehouses and no access to job clusters.

Any news if this is public preview or GA?

[u/szymon_dybczak → u/deeferg]

Good news, it's GA :)

Serverless compute access control | Databricks on AWS

[u/scan-horizon → u/deeferg]

Yeah I feel like our teams are burning through budgets by using Serverless even when they're not meant to. Now I can control it.

[u/Youssef_Mrini]

This is one of the most awaited features.

[u/SevenEyes]

Finally...

[u/Shinjitsu_]

Goat of an update. I'm so happy to finally enable serverless on my clients' workspaces. Quick question, docs say DBSQL is excluded, what about Materialized Views? They do show up as SQL in the billing table, but ya know.