---
title: "POST /api/v2/secret-rotations/databricks-service-principal-secret"
method: POST
path: "/api/v2/secret-rotations/databricks-service-principal-secret"
tags: ["Secret Rotations"]
---

# POST /api/v2/secret-rotations/databricks-service-principal-secret

`POST /api/v2/secret-rotations/databricks-service-principal-secret`

## Request

- Base URL: `https://us.infisical.com`
- URL: `https://us.infisical.com/api/v2/secret-rotations/databricks-service-principal-secret`
- Auth: none declared

Create a Databricks Service Principal Secret Rotation for the specified project.

## Request body

- object
  - `name` string, required: The name of the Databricks Service Principal Secret Rotation to create. Must be slug-friendly.
  - `projectId` string, required: The ID of the project to create the rotation in.
  - `description` string, nullable: An optional description for the Databricks Service Principal Secret Rotation.
  - `connectionId` string, uuid, required: The ID of the Databricks Connection to use for rotation.
  - `environment` string, required: The slug of the project environment to create the rotation in.
  - `secretPath` string, required: The secret path of the project to create the rotation in.
  - `isAutoRotationEnabled` boolean: Whether secrets should be automatically rotated when the specified rotation interval has elapsed.
  - `rotationInterval` number, required: The interval, in days, to automatically rotate secrets.
  - `rotateAtUtc` object: The hours and minutes rotation should occur at in UTC. Defaults to Midnight (00:00) UTC.
    - `hours` number, required
    - `minutes` number, required
  - `parameters` object, required
    - `servicePrincipalId` string, required: The ID of the Databricks Service Principal to rotate the OAuth secret for.
    - `servicePrincipalName` string: The name of the Databricks Service Principal to rotate the OAuth secret for.
    - `clientId` string, required: The client ID of the Databricks Service Principal to rotate the OAuth secret for.
  - `secretsMapping` object, required
    - `clientId` string, required: The name of the secret that the client ID will be mapped to.
    - `clientSecret` string, required: The name of the secret that the rotated OAuth client secret will be mapped to.

## Response `200`

Default Response

- object
  - `secretRotation` object, required
    - `id` string, uuid, required
    - `name` string, required
    - `description` string, nullable
    - `isAutoRotationEnabled` boolean
    - `activeIndex` number
    - `folderId` string, uuid, required
    - `connectionId` string, uuid, required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `rotationInterval` number, required
    - `rotationStatus` string, required
    - `lastRotationAttemptedAt` string, date-time, required
    - `lastRotatedAt` string, date-time, required
    - `lastRotationJobId` string, nullable
    - `nextRotationAt` string, date-time, nullable
    - `isLastRotationManual` boolean
    - `connection` object, required
      - `app` 'databricks', required
      - `name` string, required
      - `id` string, uuid, required
    - `environment` object, required
      - `slug` string, required
      - `name` string, required
      - `id` string, uuid, required
    - `projectId` string, required
    - `folder` object, required
      - `id` string, required
      - `path` string, required
    - `rotateAtUtc` object, required
      - `hours` number, required
      - `minutes` number, required
    - `lastRotationMessage` string, nullable
    - `type` 'databricks-service-principal-secret', required
    - `parameters` object, required
      - `servicePrincipalId` string, required: The ID of the Databricks Service Principal to rotate the OAuth secret for.
      - `servicePrincipalName` string: The name of the Databricks Service Principal to rotate the OAuth secret for.
      - `clientId` string, required: The client ID of the Databricks Service Principal to rotate the OAuth secret for.
    - `secretsMapping` object, required
      - `clientId` string, required: The name of the secret that the client ID will be mapped to.
      - `clientSecret` string, required: The name of the secret that the rotated OAuth client secret will be mapped to.

## Other responses

- `400`: Default Response
- `401`: Default Response
- `403`: Default Response
- `404`: Default Response
- `422`: Default Response
- `500`: Default Response

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) - [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) - [OpenAPI document](https://skmtc.dev/infisical/apis/infisical-api/revisions/7f940199c899?raw)