Skip to content

Configure Databricks to support credential vending

Before using credential vending in PuppyGraph, you need to complete some configuration steps in Databricks. The official guideline outlines the necessary requirements and procedures. Currently, PuppyGraph supports credential vending with AWS S3 and Azure Data Lake Gen2 when used as Databricks storage. If you're using a different storage system, you can specify it using the storage parameter in the schema configuration.

In the following sections, we'll walk through the Databricks setup process with step-by-step images.

1.Enable external data access on the metastore

Log in your Databricks workspace and follow the steps below.

1.1. In a Databricks workspace attached to the metastore, click Catalog icon. Click the Gear icon at the top of the Catalog pane and select Metastore.

Catalog pane with Gear icon and Metastore option
Navigate to Metastore settings

1.2. On the Details tab, enable External data access.

Metastore Details tab with External data access toggle
Enable External data access

2.1. In a Databricks workspace attached to the metastore, select the schema to be visit. Select the Permission tab and click Grant icon.

Schema Permissions tab with Grant icon
Schema permissions

2.2. Add Access token's user to Principals and Select EXTERNAL USE SCHEMA box. Then Click Grant to confirm.

Grant permissions dialog with EXTERNAL USE SCHEMA option
Grant EXTERNAL USE SCHEMA permission
Permission grant confirmed
Permission grant confirmed