Now GA: Building permission-aware Databricks Apps with on-behalf-of-user authorization

This post details the implementation of on-behalf-of-user authorization for Databricks Apps. It describes how to configure apps with explicit API scopes, pass user identity to the SQL connector, and separate app-owned from user-owned operations. It also outlines how workspace administrators can set upper boundaries for these permissions and applies the pattern to agents, emphasizing secure implementation.