Databricks enhances security by allowing API scope restriction for service principal OAuth secrets
Databricks now enables administrators to restrict service principal OAuth secrets to specific API scopes, such as `sql` or `jobs`, rather than granting access to all APIs. This enhancement significantly limits the potential impact of a leaked secret by ensuring that any token minted from a scoped secret cannot exceed its defined permissions. The capability improves overall security posture by strengthening access control and reducing the blast radius in case of a compromise. This feature is now available for Databricks users.
Features (1) ›
- Restrict OAuth secrets for service principals to specific API scopes
Databricks now allows administrators to limit a service principal's OAuth secret to specific API scopes, such as `sql` or `jobs`. This measure enhances security by ensuring that any token generated from such a secret cannot access APIs beyond its configured permissions, thereby reducing the risk associated with a compromised secret.
https://docs.databricks.com/aws/en/release-notes/product/2026/august#restrict-service-principal-oauth-secrets-to-specific-api-scopes
Related releases
- Understanding AI Copilots: Architecture, Types, Benefits, and Governance Databricks Blog ·
- Databricks Lakeflow: Pipeline Events System Table Enters Beta Databricks Release Notes ·
- Databricks Lakeflow Connect Adds Managed Glean Data Ingestion Connector (Beta) Databricks Release Notes ·
- Databricks Unity Catalog Introduces Agent Skill Management (Beta) Databricks Release Notes ·
- Databricks details autoscaling for Lakebase Postgres Databricks Blog ·
- Databricks Terraform Provider v1.130.0 Terraform Databricks Provider Releases ·