Managed Databricks Setup

Databricks setup is Vendo-led. Prepare the workspace resources below, then coordinate the final credential and connection configuration with Vendo.

Before you start

• Select a SQL warehouse suitable for the expected workload.
• Identify the catalog, schemas, tables, and views Vendo needs.
• Create or select a service principal.
• Confirm your organization permits token or OAuth-based machine access for the chosen connection method.

Grant least privilege

The principal generally needs:

• Permission to use the selected SQL warehouse.
• USE CATALOG on the approved catalog.
• USE SCHEMA on approved schemas.
• SELECT on approved tables and views.

Do not grant write privileges unless the scoped integration explicitly includes a write workflow.

Connect with Vendo

1. Share the non-secret workspace URL, warehouse HTTP path, and catalog/schema names.
2. Agree on service-principal authentication and rotation.
3. Apply the reviewed Unity Catalog grants.
4. Transfer the credential through the approved secret channel.
5. Ask Vendo to test metadata discovery and one small query.

Verify

1. Confirm the visible objects match the grant scope.
2. Run the same bounded query in Databricks SQL and Vendo.
3. Compare row count, values, and warehouse/query history.
4. Confirm a suspended warehouse starts as expected or document the start-up latency.
5. Record the credential owner and expiry date.

Troubleshooting

Related

• Databricks overview
• Custom Integrations