Why connect Sifflet to Databricks?

By connecting Sifflet to Databricks, you'll be able to leverage Sifflet's three core capabilities:

• Catalog all your data assets (with valuable metadata retrieved from Databricks and enriched directly in Sifflet).
• Run monitors on your data assets to detect issues as soon as they arise and allow data consumers to trust the data.
• Benefit from Sifflet's end-to-end lineage that showcases your data pipelines and the assets upstream and downstream of your data platform.

Integration guide

📘

Ensure you're an admin in Databricks

To perform the required operations to integrate Sifflet with Databricks, you must use a Databricks user with admin permissions.

You can integrate Sifflet with Databricks by following these steps:

1. Create a dedicated Service Principal with its token or use a Personal Access Token
2. Grant Sifflet the required permissions
3. Create the Databricks source in Sifflet

🚧

Environments without Unity Catalog and Databricks SQL

Currently, Sifflet only supports Databricks environments with Unity Catalog and Databricks SQL. For other configurations, don't hesitate to reach out to us.

1. Create a Service Principal or a Personal Access Token

A service principal is a dedicated identity created for automated tools like Sifflet. In accordance with the Databricks documentation, we recommend using a service principal instead of a Personal Access Token belonging to a Databricks user.

Option 1: Service Principal (recommended)

📘

Using a service principal token

If you opt for a Service Principal, Sifflet only supports using a personal access token for the service principal (which can only be generated via Databricks CLI) and not OAuth Machine-to-Machine (available via the UI).

1. Create a service principal using one of the below options:
   • Directly from your Databricks admin console
   • Programmatically via the API
2. In the Configurations tab of the newly created service principal, enable the Databricks SQL access entitlement (the only required entitlement).
3. Grant the usage of personal access tokens to this service principal (more information here):
   • Follow this path: Workspace admin -> Advanced-> Personal Access Tokens -> Permission Settings.
   • Add the Can Use permission to the service principal previously created.
4. Generate a personal access token for the service principal (requires the use of Databricks CLI):
   • For a step-by-step description please follow the "Databricks personal access tokens for service principals" from the official documentation.
   • Save the token as you will need it to connect Databricks to Sifflet.

Option 2: User Personal Access Token

To create a user personal access token, please follow the section "Databricks personal access tokens for workspace users" from the official documentation.

Save the token as you will need it to connect Databricks to Sifflet.

2. Grant Sifflet the required permissions

You can grant permissions to the service principal at the Catalog, Schema or Table level.

📘

Grant access permissions to existing and future tables

• Granting permissions at Catalog level will automatically propagate the permissions to existing and future schemas and tables.
• Granting permissions at Schema level will automatically propagate the permissions to existing and future tables.

Option 1: Grant permissions using the Databricks console

In the left menu select Catalog

Granting permissions at the Catalog level

1. Navigate to the Catalog you want to add to Sifflet
2. Navigate to the Permissions tab
3. Click on Grant
4. Search the service principal/user in the Principals box
5. Select the Data Reader privilege preset

Granting permissions at Schema level

Granting the USE CATALOG privilege

You need to grant the service principal/user the USE CATALOG privilege on the parent catalog to perform any actions in the target schema:

1. Navigate to the Catalog you want to add to Sifflet
2. Navigate to the Permissions tab
3. Click on Grant
4. Search the service principal/user in the Principals box
5. Select USE CATALOG

Granting the Schema level permissions

1. Navigate to the Schema you want to add to Sifflet
2. Navigate to the Permissions tab
3. Click on Grant
4. Search the service principal/user in the Principals box
5. Select the Data Reader privilege preset

Option 2: Grant permissions by running SQL queries

• For the service principal, you will need the service principal Application ID that can be found in Admin Console -> Service principals tab.
• For the user's personal access token, you can replace the Application ID with the user name.

Granting permissions at Catalog level

Granting permissions at Catalog level:

GRANT USE_CATALOG ON CATALOG <catalog_name> TO `<Application_ID>`;
GRANT USE_SCHEMA ON CATALOG <catalog_name> TO `<Application_ID>`;
GRANT SELECT ON CATALOG <catalog_name> TO `<Application_ID>`;

Granting permissions at Schema level

Granting permissions at Schema level:

GRANT USE_CATALOG ON CATALOG <catalog_name> TO `<Application_ID>`;
GRANT USE_SCHEMA ON SCHEMA <catalog_name>.<schema_name> TO `<Application_ID>`;
GRANT SELECT ON SCHEMA <catalog_name>.<schema_name> TO `<Application_ID>`;

Granting permissions at Table level

Granting permissions at Table level:

GRANT USE_CATALOG ON CATALOG <catalog_name> TO `<Application_ID>`;
GRANT USE_SCHEMA ON SCHEMA <schema_name> TO `<Application_ID>`;
GRANT SELECT ON TABLE <catalog_name>.<schema_name>.<table_name> TO `<Application_ID>`;

3. Create the Databricks source in Sifflet

Create a new credential

To create the Databricks credential, follow the below steps:

• Navigate to the "Credentials" page (you can find it in the side panel by selecting "Integrations" and then "Credentials") and then click on "New credential"
• Paste the previously generated token as-is

Create a new source

📘

Picking a SQL Warehouse for Sifflet

You can use an existing SQL warehouse or create a new one for Sifflet (recommended). If you want to create a new warehouse, you can follow the instructions detailed here.

You can choose the cluster size depending on the number of data assets you want to monitor. As a reference, X-Small is enough for environments with thousands of tables or fewer.

First, let's find the information that Sifflet requires to integrate with Databricks. In your Databricks environment:

1. Go to SQL Warehouse
2. Choose the warehouse that Sifflet will use
3. Navigate to the Connection Details tab

Then, in Sifflet, you can follow the below steps:

• Go to the source creation page (detailed here)
• Fill out the necessary information that was collected in the previous step:
  • Name: The name that will be used to reference the source throughout Sifflet
  • Host : corresponds to the Server hostname in Databricks, with the format xxxxx.cloud.databricks.com
  • Port: 443
  • Http Path: corresponds to the HTTP path in Databricks
  • Catalog: the Catalog you want to add to Sifflet
  • Schema: the Schema you want to add to Sifflet
  • Credential: the name of the secret created above (containing the token)

📘

Source refresh frequency

By default, Sifflet refreshes Databricks metadata once per day. However you can use the frequency parameter to pick a different refresh schedule if required.

You can refer to this page for more details on adding a source in Sifflet.