Automatic Identity Management for Entra ID is now Generally Available in Azure Databricks

Automatic Identity Management (AIM) for Entra ID on Azure Databricks is now Generally Available.

As customers scale their use of Databricks, managing thousands of users, groups, and service principals across teams becomes complex. Traditionally, admins have relied on SCIM, custom scripts, or manual setup to provision access and keep identities in sync. While these approaches work, they add overhead and make it harder to keep up with fast-growing identity environments.

AIM changes this. Users, groups, and service principals from Entra ID are now connected automatically, so you no longer need to pre-provision identities. This means faster onboarding, less manual work, and smoother collaboration. For example, you can now share an AI/BI dashboard with anyone in your Entra ID directory, even if they've never logged into Databricks before.

In this post, we'll discuss the GA release's features and how AIM works in practice.

What's new in our General Availability release

With this GA release, Automatic Identity Management (AIM) for Entra ID brings several important updates for Azure Databricks customers to help with adoption and scalability:

• On by default for new accounts: Every new Azure Databricks account now has AIM enabled automatically. Admins can skip manual provisioning and start with less overhead from day one.
• Simple opt-in for existing accounts: Existing accounts can enable AIM anytime with a single toggle in the Account Admin Console. In the coming months, AIM will become the default across all accounts.
• API support for automation:APIs are now available to programmatically register Entra users, groups, and service principals. This makes it easier to handle large-scale onboarding, scripted automation, or partial provisioning setups.

How Automatic Identity Management Works