Skip to main content

Granting System Table and Workspace Discovery Access

note

This feature is available as an early‑access capability for Databricks. To enable it for your account, contact Flexera Support. For more information, see Contacting Flexera Support.

To allow Flexera One to read Databricks billing and compute data and to automatically discover all eligible workspaces, you must grant the service principal access to the system tables in one workspace in every region.

Granting System Schema Access​

To allow the service principal to query Databricks Unity Catalog system tables, you must grant it the necessary permissions in the workspace. You need to do this in only one workspace per region (where the warehouse is provisioned). The service principal uses the warehouse to gather the required data for all workspaces in that region.

Open an SQL Editor in the workspace and run the following SQL commands:

GRANT USE CATALOG ON CATALOG system TO `<service_principal_client_id>`;
GRANT USE SCHEMA ON CATALOG system TO `<service_principal_client_id>`;
GRANT SELECT ON CATALOG system TO `<service_principal_client_id>`;

Auto Discovery of New Workspaces​

If you create a new workspace in a region that already has an indexed workspace, Flexera automatically discovers the workspace and starts tracking its usage.

If you add workspaces in a new region, Flexera can also discover workspaces in that region as long as the following conditions are met:

For example, if you have two workspaces in West US and one workspace in EU Central. You must provide access to two warehouses (one in West US and one in EU Central) and grant the service principal access to the system tables and the tagged warehouse in those workspaces. If you add another workspace in West US or EU Central, no further action is required. Flexera automatically discovers the new workspace and pulls data from it.

If you later add one or more workspaces in East US, ensure that the service principal can read the system tables in at least one of those workspaces (by providing access to a warehouse and granting the relevant permissions). This enables Flexera to automatically start tracking data for all the new workspaces in East US.

warning

If a region does not meet these prerequisites, Flexera pulls only unenriched usage data for that region.