← All updates Databricks Update One-Pager Light version
databricks Platform · Updated May 20, 2026

Authenticate as a service principal using OAuth OBO (Beta)

You can now use OAuth on behalf of (OBO) to obtain tokens that act with a service principal's identity instead of your own user account.

What it does

You can now use OAuth on behalf of (OBO) to obtain tokens that act with a service principal's identity instead of your own user account. You must have the Service Principal Manager role on the service principal. This page explains how to authorize access to Databricks resources from unattended processes, such as automated CLI commands or REST API calls made from scripts or applications.

Why it matters

Reduces operational overhead and unlocks new capabilities for data teams on Databricks.

Architecture
Databricks Platform → Platform
In short

You can now use OAuth on behalf of (OBO) to obtain tokens that act with a service principal's identity instead of your own user account. You must have the Service Principal Manager role on the service principal.

Read the full documentation ↗
Key takeaway
You can now use OAuth on behalf of (OBO) to obtain tokens that act with a service principal's identity instead of your own user account.
2026-05-20-authenticate-as-a-service-principal-using-oauth-obo-beta Generated by the Databricks Updates Agent · browse all updates