Working with Databricks Compute on Azure

Working with Databricks Compute on Azure

Note
For creating Databricks compute connection for no-Spark deployment, add Storage blob data contributor permission to the service principal on the storage account.

For No-Spark, if Catalog is disabled for the Databricks workspace, you must create Databricks compute connection. In case, the catalog is enabled, create Databricks SQL Warehouse connection.

Prerequisites for OAuth Connection

To create Databricks Compute connection with OAuth, you need to complete the following prerequisites.

  1. Create a Service Principal

    1. Go to the user profile, click Settings, then Identity and Access. Under Service Principal [Manage], click Add Service Principal, and note generated Application ID or Client ID; this will be OAuth2ClientId.

    2. Generate a secret for this Service Principal and note it down as it is OAuth2Secret.

  2. Grant required permissions for Databricks compute cluster: Add the service principal with the permission "CAN MANAGE".

  3. Prepare the JDBC URL:
    Get the JDBC URL from the cluster's JDBC tab. For example, if the JDBC URL is:

jdbc:databricks://adb-346948531508790.10.azuredatabricks.net:443/default;transportMode=http;ssl=1;httpPath=sql/protocolv1/o/346948531508790/0603-063832-6r36ca4x;AuthMech=3;UID=token;PWD=<personal-access-token>

Change the URL as follows (change AuthMech=11 and add Auth_Flow=1 to the parameters):

jdbc:databricks://adb-650081446221384.4.azuredatabricks.net:443/default;transportMode=http;ssl=1;AuthMech=11;httpPath=sql/protocolv1/o/650081446221384/0809-080132-67 1a9aak;Auth_Flow=1

Working with Databricks compute connection with Personal Token and OAuth

Kyvos supports Databricks compute connection to enable the execution of multidimensional model and relational multidimensional model queries.

Creating Databricks compute connection with Personal Token

  1. From the Toolbox, click Setup, then choose Connections.

  2. From the Actions menu (  ), click Add Connection.

  3. Enter a Name for the connection.

  4. From the Category drop-down list, select the Warehouse option.

  5. From the Provider list, select the DatabricksCompute option.

  6. The Driver Class field is prepopulated.

  7. Enter Databricks Compute JDBC URL. For more information, see Microsoft documentation.

  8. Change the URL as follows:

    jdbc:databricks://adb-346948531508790.10.azuredatabricks.net:443/default;httpPath=sql/protocolv1/o/346948531508790/0617-065358-ijzzqhl3;
  9. Select Authentication type as Personal Access Token list.

  10. Enter Username as token.

  11. Enter Databricks Personal Access Token for the Databricks SQL workspace in the Password field.

  12. The Use as Source checkbox is disabled as this is a source connection.

  13. To use this connection as the default SQL engine, select the Is Default SQL Engine checkbox.

  14. Keep the Catalog Enabled checkbox unselected.

  15. Click the Properties link to view or set properties.

  16. After configuring the settings, click the Save button. 

  17. To refresh connections, click the Actions menu ( ⋮ ) at the top of the Connections column and select Refresh.

image-20250623-112936.png

Creating Databricks Compute connection with OAuth

You can create Databricks compute connection with OAuth machine-to-machine (M2M) authentication type. See Prerequisites for more details.

  1. From the Toolbox, click Setup, then choose Connections.

  2. From the Actions menu (  ), click Add Connection.

  3. Enter a Name for the connection.

  4. From the Category drop-down list, select the Warehouse option.

  5. From the Provider list, select the DatabricksCompute option.

  6. The Driver Class field is prepopulated.

  7. Enter Databricks Compute JDBC URL. For more information, see Microsoft documentation.

  8. Change the URL as follows (change AuthMech=11 and add Auth_Flow=1 to the parameters):

    jdbc:databricks://adb-650081446221384.4.azuredatabricks.net:443/default;transportMode=http;ssl=1;AuthMech=11;httpPath=sql/protocolv1/o/650081446221384/0809-080132-671a9aak;Auth_Flow=1
  9. Select OAuth from the Authentication Type list. Upon selecting this option, the Client ID and Client Secret fields are displayed.

  10. In the Client ID field, enter the value of the service principal’s Application ID, Client ID, or OAuth2ClientId.

  11. In the Client Secret field, enter the value of the secret created for the above service principal or the OAuth2ClientId.

  12. The Use as Source checkbox is disabled as this is a source connection.

  13. To use this connection as the default SQL engine, select the Is Default SQL Engine checkbox.

  14. Keep the Catalog Enabled checkbox unselected.

  15. Click the Properties link to view or set properties.

  16. After configuring the settings, click the Save button. 

  17. To refresh connections, click the Actions menu ( ⋮ ) at the top of the Connections column and select Refresh.

image-20250623-113159.png

 

Copyright Kyvos, Inc. 2025. All rights reserved.