Problem

You are trying to run a notebook or job using a dedicated compute assigned to a user group. The group has been granted CAN RUN permissions on the workspace folder that contains the notebook. However, when executing the notebook, you encounter an error similar to the following.

Py4JJavaError: An error occurred while calling o480.run.
: com.databricks.WorkflowException: com.databricks.common.client.DatabricksServiceHttpClientException: PERMISSION_DENIED: The user '<group-name>' does not have access to Databricks Workspace

Cause

The user group does not have the workspace access entitlement enabled. Even though the group has folder-level permissions, this entitlement is required for users to access and interact with objects in the workspace, including notebooks and jobs.

Solution

Have a workspace administrator grant workspace access entitlement to the group assigned to the compute. They should follow these steps. 

1. In the Databricks UI, click Settings.
2. Select the Identity and access tab.
3. Click Groups.
4. Search for the relevant user group named in the error, and click its name.
5. In the group settings, locate the Entitlements section.
6. Check if Workspace access is listed.
7. If not enabled, click Grant next to Workspace access.

For more information, review the Manage entitlements (AWS | Azure | GCP) documentation.

For information about how to manage the groups using the account console, refer to the Manage groups (AWS | Azure | GCP) documentation.