Turbot Guardrails Hub 
Hub
Mods
Azure
45
Mods
176
Resource Types
3,033
Policies
1,635
Controls
103
Quick Actions
102
IAM

Policy: Azure > CIS v5.0 > 2 - Analytics Services > 2.01 - Azure Databricks > 2.01.04 - Ensure that users and groups are synced from Microsoft Entra ID to Azure Databricks

Configures auditing against a CIS Benchmark item.

Level: 1

By default, Azure Databricks adds an Entra ID user to its directory when that user first accesses Databricks. Users and groups can also be synchronized from Entra ID using SCIM (System for Cross-domain Identity Management) provisioning.

Synchronizing users and groups from Entra ID provides: - Centralized identity management through a single source of truth - Automatic user lifecycle management (provisioning and deprovisioning) - Consistent access control across Azure services - Simplified compliance and auditing

This control requires manual verification to confirm that SCIM provisioning is configured for the Databricks workspace.

Targets

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

Controls

Setting this policy configures this control:

Policy Specification

Schema Type
string
Default
Per Azure > CIS v5.0 > 02 - Analytics Services
Valid Values [YAML]
  • Per Azure > CIS v5.0 > 02 - Analytics Services

  • Skip

  • Check: Benchmark using attestation

Category

In Your Workspace

Developers