Databricks Administration Overview: Accounts and Workspaces
Who this is for:
Architecture / Concept Overview: Databricks Administration Overview: Accounts and Workspaces
%%{init: {"theme":"base","themeVariables":{"background":"#0B0E14","primaryTextColor":"#E0E6ED","lineColor":"#5D6470","darkMode":true,"primaryColor":"#2E4A4A","secondaryColor":"#374151","secondaryTextColor":"#E0E6ED","tertiaryColor":"#111827","tertiaryTextColor":"#E0E6ED","edgeLabelBackground":"#1f2937"}}}%%
graph TD
classDef source fill:#3F4B59,stroke:#9CA3AF,stroke-width:2px,rx:8,ry:8,color:#E0E6ED
classDef ingestion fill:#5A4B36,stroke:#C9A86B,stroke-width:2px,rx:8,ry:8,color:#E0E6ED
classDef processing fill:#535072,stroke:#8E82B4,stroke-width:2px,rx:8,ry:8,color:#E0E6ED
classDef storage fill:#2E4A4A,stroke:#5FAFA8,stroke-width:2px,rx:8,ry:8,color:#E0E6ED
classDef serving fill:#3D5550,stroke:#6BB7AA,stroke-width:2px,rx:8,ry:8,color:#E0E6ED
classDef governance fill:#5A3F52,stroke:#C28BB0,stroke-width:2px,rx:8,ry:8,color:#E0E6ED
Account[Databricks Account] --> Identity[Identity & SSO]
Account --> Billing[Billing & Subscriptions]
Account --> Metastore[Unity Catalog Metastore]
Account --> WS1[Workspace: Production]
Account --> WS2[Workspace: Development]
Account --> WS3[Workspace: ML Platform]
WS1 --> Clusters1[Clusters & Policies]
WS1 --> Jobs1[Jobs & Workflows]
WS2 --> Clusters2[Clusters & Policies]
WS3 --> Clusters3[Clusters & Policies]
Metastore --> WS1
Metastore --> WS2
Metastore --> WS3
Account:::governance
Identity:::processing
Billing:::source
Metastore:::storage
WS1:::serving
WS2:::ingestion
WS3:::ingestion
Clusters1:::source
Jobs1:::source
Clusters2:::source
Clusters3:::source
*Account-workspace hierarchy: a single account provides centralized governance over multiple isolated workspaces sharing identity and metastore.*
%%{init: {"theme":"base","themeVariables":{"background":"#0B0E14","primaryTextColor":"#E0E6ED","lineColor":"#5D6470","darkMode":true,"primaryColor":"#2E4A4A","secondaryColor":"#374151","secondaryTextColor":"#E0E6ED","tertiaryColor":"#111827","tertiaryTextColor":"#E0E6ED","edgeLabelBackground":"#1f2937"}}}%%
flowchart LR
classDef source fill:#3F4B59,stroke:#9CA3AF,stroke-width:2px,rx:8,ry:8,color:#E0E6ED
classDef ingestion fill:#5A4B36,stroke:#C9A86B,stroke-width:2px,rx:8,ry:8,color:#E0E6ED
classDef processing fill:#535072,stroke:#8E82B4,stroke-width:2px,rx:8,ry:8,color:#E0E6ED
classDef storage fill:#2E4A4A,stroke:#5FAFA8,stroke-width:2px,rx:8,ry:8,color:#E0E6ED
classDef serving fill:#3D5550,stroke:#6BB7AA,stroke-width:2px,rx:8,ry:8,color:#E0E6ED
classDef governance fill:#5A3F52,stroke:#C28BB0,stroke-width:2px,rx:8,ry:8,color:#E0E6ED
AccAdmin[Account Admin] --> AccConsole[Account Console]
AccConsole --> WsMgmt[Workspace Management]
AccConsole --> UserMgmt[User Management]
AccConsole --> BillMgmt[Billing Management]
WsAdmin[Workspace Admin] --> WsConsole[Workspace Admin Console]
WsConsole --> Compute[Compute Settings]
WsConsole --> Security[Security Settings]
WsConsole --> Features[Feature Flags]
AccAdmin:::governance
AccConsole:::processing
WsMgmt:::storage
UserMgmt:::ingestion
BillMgmt:::source
WsAdmin:::serving
WsConsole:::processing
Compute:::ingestion
Security:::governance
Features:::source
*Admin role separation: account admins manage cross-workspace concerns while workspace admins handle environment-specific settings.*
Key Terms
Prerequisites and Setup
- Databricks account provisioned on your cloud provider (AWS, Azure, or GCP)
- Account admin credentials (created during initial account setup)
- Understanding of your organizational structure for workspace planning
- Cloud provider account with appropriate resource quotas
- Network architecture plan for workspace isolation requirements
Step-by-Step Implementation
Configuration Reference
| Setting | Scope | Configurable By | Impact |
|---|---|---|---|
| SSO/SCIM | Account | Account Admin | All workspaces |
| Billing Configuration | Account | Account Admin | Billing reports |
| Metastore Assignment | Account | Account Admin | Data governance |
| Workspace Creation | Account | Account Admin | New environment |
| Compute Policies | Workspace | Workspace Admin | Cluster creation |
| Access Controls | Workspace | Workspace Admin | Object permissions |
| Token Management | Workspace | Workspace Admin | API access |
| Feature Flags | Workspace | Workspace Admin | Feature availability |