DROP SERVICE PRINCIPAL

Removes a service principal. The Control Plane cascades the removal: role grants and direct object grants targeting the service principal are revoked.

Category: securityPrivilege: ManageUsersDeltaForge extension

Syntax

DROP SERVICE PRINCIPAL [IF EXISTS] <name>

Description

## Overview DROP SERVICE PRINCIPAL removes a service principal from the catalog. All role assignments and direct object grants targeting the principal are revoked by the Control Plane. ## Behavior - Without IF EXISTS, dropping a non-existent service principal raises an error. With IF EXISTS, the operation succeeds silently. - Cascading removal: every role grant to the principal is dropped, and every direct grant on a zone, schema, table, external location, or storage credential targeting the principal is removed. - Pipelines or jobs that authenticate as the dropped principal will fail their next run with an authentication error. ## Access Control Requires the `ManageUsers` privilege. ## Compatibility DeltaForge extension.

Parameters

Name	Type	Description
`name`		Specifies the service principal to drop.
`if_exists`		Skip silently when the service principal does not exist.

Examples

DROP SERVICE PRINCIPAL old_runner;

DROP SERVICE PRINCIPAL IF EXISTS old_runner;

Pitfalls

Pipelines and external integrations authenticating as the dropped service principal start failing on their next invocation. Audit dependent automation (SHOW GRANTS TO PRINCIPAL <name> and pipeline metadata) before dropping a service principal in production.