Policy: Azure > CIS v4.0 > 03 - Analytics Services > 03.01 - Azure Databricks > 03.01.04 - Ensure that users and groups are synced from Microsoft Entra ID to Azure Databricks > Attestation

By setting this policy, you attest that you have manually verified that it complies with the relevant section of the CIS Benchmark.

Ensure that users and groups are synced from Microsoft Entra ID to Azure Databricks.

Databricks Console To verify Entra ID synchronization: 1. Log in to the Azure Databricks workspace. 2. Navigate to Settings > Identity and Access. 3. Verify that SCIM provisioning is configured for Microsoft Entra ID. 4. Check that users and groups are being synchronized. 5. Verify that manual user creation is disabled or restricted.

Azure Portal 1. Navigate to Microsoft Entra ID > Enterprise applications. 2. Find the Databricks application. 3. Verify provisioning is configured and users/groups are assigned.

Once verified, enter the date that this attestation expires. Note that the date can not be further in the future than is specified in report level Maximum Attestation Duration policy. Set to a blank value to clear the attestation.