Connect Databricks to DSPM

Overview

Netskope DSPM supports scanning of Databricks Data Stores. Follow these instructions to prepare your Databricks environment and connect it to the Netskope DSPM platform.

Create a Databricks Service Account

Netskope DSPM requires programmatic access to connect to & scan your Databricks Data Stores, including assigning specific user permissions. Please follow the steps below to create the necessary configurations within the Databricks console.

More information about creating Databricks users is available here.

Create and Configure Netskope DSPM User

Begin by creating and configuring a Netskope DSPM-specific service account in your Databricks instance.

1. Log into your Databricks Console as any Admin user.
2. If prompted, select the workspace which contains the Data Stores you wish Netskope DSPM to monitor.
3. Navigate to Settings > Admin Console.
4. The Admin Console screen is displayed.
5. On the Users tab, click the Add User button.
6. The Add User modal is displayed.
7. Complete the Email field, using the value that corresponds to the Netskope DSPM-specific user.  
8. Click the Send invite button.
9. When the invitation arrives at the specified email address, click the link to accept the invitation.
10. Navigate back to Settings > Admin Console.
11. On the Users tab, for the user you just added, grant the following permissions:
    a. Workspace Access
    b. Databricks SQL Access

    

12. Navigate to the Workspace Settings tab.
13. Under the Access Control section > Personal Access Tokens section
    a. Ensure that the section is enabled.
    b. Click on its Permission Settings button.
14. The Permission Settings modal is displayed.
15. Add the above Netskope DSPM-specific username to the list and grant the “Can Use” permission by clicking the + Add button.
16. Click the Save button.

Generate the Access Token

Next, you will use the Netskope DSPM-specific service account itself to generate the access token that Netskope DSPM requires for connecting to your Databricks instance.

1. Log into your Databricks Console as the Netskope DSPM-specific service account that was created above.
2. If prompted, select the workspace which contains the Data Stores you wish Netskope DSPM to monitor.
3. Navigate to Settings > User Settings.
4. The User Settings screen is displayed.
5. On the Access Tokens tab, click the Generate New Token button.
6. The Generate New Token modal is displayed
7. Complete the following fields:
   a. Comment: any value, although it is recommended you note it is used by Netskope DSPM
   b. Lifetime (days): any value, including blank (indefinite)
8. Click the Generate button.
9. The screen will refresh to display your generated token.
10. Make note of the generated token, which will later be used within Netskope DSPM for connecting your Databricks Data Stores
11. Click the Done button.

Configure the Databricks Cluster

1. Log into your Databricks Console as any Admin user.
2. If prompted, select the workspace which contains the Data Stores you wish Netskope DSPM to monitor.
3. In the sidebar, navigate to Compute > All-Purpose Clusters tab.
4. Click on the name for the cluster being used by Netskope DSPM to view its details
5. On the top-right, click the More… button, then select Permissions.
6. The Permission Settings modal is displayed.
7. Add the above Netskope DSPM-dedicated username to the list & grant the “Can Manage” permission.
8. Click the Save button.

   

   
9. On the Configuration tab, click the Advanced Options toggle to expand its contents.
10. Within the expanded contents, click the JDBC/ODBC tab.
11. Make note of the following highlighted portions, which will later be used within Netskope DSPM for connecting your Databricks Data Stores:

Highlight Color	Corresponding Netskope DSPM Value	Example
Blue	Server
Grey	HTTP Path

Connect Your Data Store

Step 1: Provide Credentials

Follow these steps to configure the connection:

1. Go to Data Stores > Data Store Inventory.

2. Click CONNECT A DATA STORE in the upper right.

   Tip: Alternatively, if the data store was already found by auto-discovery, go to the Discovered tab and click Connect in the Actions column.

   

3. In the Connect a Data Store window, click the data store icon you wish to connect.

4. In the Provide Credentials section, complete the following fields:

Step 2: Scanning Infrastructure

1. Click Next.
2. When the Select Capabilities tab appears, complete the following fields:
   • Assign a Data Owner (Optional): Select one or more users responsible for this data store.
   • Which databases should Netskope DSPM scan?: Select the specific data stores and schemas to monitor, if applicable.
   • Features: Select the features you want to enable.

Step 3: Review and Save

1. Click Save.
   • When the Review tab appears, the system validates your configuration. If there are any issues, follow the on-screen instructions to fix them.
2. Click Save to finalize the connection.