upd

Author: MyroslavLevchyk

README.md

@@ -9,14 +9,13 @@ The main idea behind this module is to deploy resources for Databricks Workspace
 Here we provide some examples of how to provision it with a different options.
 
 ### In example below, these features of given module would be covered:
-1. Permissions and entitlements for users and groups within Databricks
-2. Clusters (i.e., for Unity Catalog and Shared Autoscaling)             
-3. Workspace IP Access list creation                                     
-4. ADLS Gen2 Mount                                                       
-5. Create Secret Scope and assign permissions to custom groups                                                  
-6. SQL Endpoint creation and configuration                               
-7. Create Cluster policy                                                 
-8. Create an Azure Key Vault-backed secret scope                         
+1. Clusters (i.e., for Unity Catalog and Shared Autoscaling)             
+2. Workspace IP Access list creation                                     
+3. ADLS Gen2 Mount                                                       
+4. Create Secret Scope and assign permissions to custom groups                                                  
+5. SQL Endpoint creation and configuration                               
+6. Create Cluster policy                                                 
+7. Create an Azure Key Vault-backed secret scope                         
 
 ```hcl
 # Prerequisite resources
@@ -58,29 +57,7 @@ module "databricks_runtime_premium" {
   # Cloud provider
   cloud_name = cloud-name # cloud provider (e.g., aws, azure)
 
-  # 1. Permissions and entitlements for users and groups within Databricks
-  iam_workspace_groups = {
-    dev = {
-      user = [
-        "user1@example.com",
-        "user2@example.com"
-      ]
-      service_principal = []
-      entitlements = ["allow_instance_pool_create","allow_cluster_create","databricks_sql_access"]
-    }
-  }
-
-  iam_account_groups = [{
-    group_name  = "example-gn"
-    permissions = ["ADMIN"]
-    entitlements = [
-      "allow_instance_pool_create",
-      "allow_cluster_create",
-      "databricks_sql_access"
-    ]
-  }]
-
-  # 2. Databricks clusters configuration, and assign permission to a custom group on clusters.
+  # 1. Databricks clusters configuration, and assign permission to a custom group on clusters.
   databricks_cluster_configs = [ {
     cluster_name       = "Unity Catalog"
     data_security_mode = "USER_ISOLATION"
@@ -96,33 +73,33 @@ module "databricks_runtime_premium" {
     permissions        = [{group_name = "DEVELOPERS", permission_level = "CAN_MANAGE"}]
   }]
 
-  # 3. Workspace could be accessed only from these IP Addresses:
+  # 2. Workspace could be accessed only from these IP Addresses:
   ip_rules = {
     "ip_range_1" = "10.128.0.0/16",
     "ip_range_2" = "10.33.0.0/16",
   }
   
-  # 4. ADLS Gen2 Mount
+  # 3. ADLS Gen2 Mount
   mountpoints = {
     storage_account_name = data.azurerm_storage_account.example.name
     container_name       = "example_container"
   }
 
-  # 5. Create Secret Scope and assign permissions to custom groups 
+  # 4. Create Secret Scope and assign permissions to custom groups 
   secret_scope = [{
     scope_name = "extra-scope"
     acl        = [{ principal = "DEVELOPERS", permission = "READ" }] # Only custom workspace group names are allowed. If left empty then only Workspace admins could access these keys
     secrets    = [{ key = "secret-name", string_value = "secret-value"}]
   }]
 
-  # 6. SQL Warehouse Endpoint
+  # 5. SQL Warehouse Endpoint
   databricks_sql_endpoint = [{
     name        = "default"  
     enable_serverless_compute = true  
     permissions = [{ group_name = "DEVELOPERS", permission_level = "CAN_USE" },]
   }]
 
-  # 7. Databricks cluster policies
+  # 6. Databricks cluster policies
   custom_cluster_policies = [{
     name     = "custom_policy_1",
     can_use  =  "DEVELOPERS", # custom workspace group name, that is allowed to use this policy
@@ -135,7 +112,7 @@ module "databricks_runtime_premium" {
     }
   }]
 
-  # 8. Azure Key Vault-backed secret scope
+  # 7. Azure Key Vault-backed secret scope
   key_vault_secret_scope = [{
     name         = "external"
     key_vault_id = data.azurerm_key_vault.example.id