Problem

You using SCIM to provision new users on your Databricks workspace when you get a Members attribute not supported for current workspace error.

StatusCode: BadRequest
Message: Processing of the HTTP request resulted in an exception. Please see the HTTP response returned by the 'Response' property of this exception for details.
Web Response: 
{"schemas":["urn:ietf:params:scim:api:messages:2.0:Error"],"scimType":"Members attribute not supported for current workspace.","detail":"Request is unparsable, syntactically incorrect, or violates schema.","status":"400"}
. This operation was retried 0 times. It will be retried again after this date: 2022-07-07T10:51:04.8148533Z UTC

Cause

The Members attribute not supported for current workspace error message indicates that identity federation is enabled on the workspace. Accounts that have Unity Catalog enabled (Identity federation will be enabled by default) manage users and groups at the account level. You get an error if you try to manage them at the workspace level.

Solution

Verify your workspace settings. If Unity Catalog is enabled on the workspace you must manage users and groups at the account level.

Review the documentation on managing identities in Unity Catalog for more information. 

There are two ways to determine if Unity Catalog is enabled on the workspace or not.

1. From the accounts console as an admin user
2. From the workspace UI as a normal user

From the Account Console (Admin)

1. Log in to the Account Console at https://accounts.cloud.databricks.com.
2. Review the list of workspaces in your account.
   
3. Click the name of the workspace to open the workspace Configuration.
4. On the right hand side of the screen, look for the Identity federation value.
   
5. Review the Metastore configuration section and look for a unity-catalog value.
   
6. If the Identity federation is set to Enabled or the metastore is configured with unity-catalog you must manage users and groups at the account level.

From the workspace UI (non-admin)

1. Log in to your workspace.
2. Click Compute.
3. Click the Create Cluster button.
4. Review the options under Cluster mode.
5. If High Concurrency is an option, Unity Catalog is disabled and you can manage users and groups at the workspace level.
   
6. If High Concurrency mode shows as disabled, Unity Catalog is enabled and you must manage users and groups at the account level.