databricks Databricks Go SDK Releases · · 0.176.0

Databricks Go SDK v0.176.0 Adds Group Role Assumption for OAuth M2M

sdksecuritydatabricksgaengineer
feature patch

Databricks Go SDK v0.176.0 introduces group role assumption for built-in OAuth M2M and workload identity federation authentication. This enhancement allows service principals and workloads to assume specific group roles for more granular access control. The update includes safeguards to prevent other credential strategies, such as Databricks CLI, from silently acquiring normal-access credentials. Note that Databricks CLI authentication currently rejects group role assumption.

Features (1)
  • Added group role assumption to built-in SDK OAuth M2M and workload identity federation authentication, with safeguards that prevent other built-in credential strategies, including Databricks CLI authentication, from silently obtaining normal-access credentials

Maintenance (1)
  • Added group ID configuration and U2M OAuth support for group role assumption. Account authentication is rejected, while unified authentication passes the group ID to the OAuth server for compatibility with future support. The SDK's Databricks CLI authentication rejects group role assumption until the CLI behavior is supported

Read the original announcement →

https://github.com/databricks/databricks-sdk-go/releases/tag/v0.176.0

Related releases