# Spark (/docs/reference/roles-permissions/spark)



Spark permissions are baseline tenant-member capabilities. Namespace authorization and, for creator-restricted operations, workload ownership are enforced in addition to the tenant gate. Membership does not grant access to every Kubernetes namespace or another user's workloads.

## Permissions [#permissions]

This family contains **9 permissions**. “Baseline member” means every current tenant member already has the operation permission, including members with any system role. It does not bypass the resource checks described above. “Custom role” means the identifier can be selected when defining a custom role.

<Catalogue>
  <details className="catalogue-entry">
    <summary>
      ### spark.cluster.create [#sparkclustercreate]

      <span className="catalogue-description">
        Create a Spark cluster in an authorized profile namespace.
      </span>
    </summary>

    <div className="catalogue-content">
      Create a Spark cluster in an authorized profile namespace.

      | Property     | Value                                                                                                                                                          |
      | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                                |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership)                                                                   |
      | Custom role  | Yes                                                                                                                                                            |
      | Also implies | [spark.cluster.list](/docs/reference/roles-permissions/spark#sparkclusterlist), [spark.cluster.read](/docs/reference/roles-permissions/spark#sparkclusterread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### spark.cluster.delete [#sparkclusterdelete]

      <span className="catalogue-description">
        Delete a Spark cluster, subject to namespace and creator checks.
      </span>
    </summary>

    <div className="catalogue-content">
      Delete a Spark cluster, subject to namespace and creator checks.

      | Property     | Value                                                                                                                                                          |
      | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                                |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership)                                                                   |
      | Custom role  | Yes                                                                                                                                                            |
      | Also implies | [spark.cluster.list](/docs/reference/roles-permissions/spark#sparkclusterlist), [spark.cluster.read](/docs/reference/roles-permissions/spark#sparkclusterread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### spark.cluster.list [#sparkclusterlist]

      <span className="catalogue-description">
        List Spark clusters in a namespace the caller is permitted to use.
      </span>
    </summary>

    <div className="catalogue-content">
      List Spark clusters in a namespace the caller is permitted to use.

      | Property     | Value                                                                                        |
      | ------------ | -------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                              |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role  | Yes                                                                                          |
      | Also implies | [spark.cluster.read](/docs/reference/roles-permissions/spark#sparkclusterread)               |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### spark.cluster.read [#sparkclusterread]

      <span className="catalogue-description">
        Inspect a Spark cluster in an accessible namespace.
      </span>
    </summary>

    <div className="catalogue-content">
      Inspect a Spark cluster in an accessible namespace.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | Yes                                                                                          |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### spark.cluster.scale [#sparkclusterscale]

      <span className="catalogue-description">
        Change a Spark cluster's worker count, subject to namespace and creator checks.
      </span>
    </summary>

    <div className="catalogue-content">
      Change a Spark cluster's worker count, subject to namespace and creator checks.

      | Property     | Value                                                                                                                                                          |
      | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                                |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership)                                                                   |
      | Custom role  | Yes                                                                                                                                                            |
      | Also implies | [spark.cluster.list](/docs/reference/roles-permissions/spark#sparkclusterlist), [spark.cluster.read](/docs/reference/roles-permissions/spark#sparkclusterread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### spark.job.create [#sparkjobcreate]

      <span className="catalogue-description">
        Submit a Spark job in an authorized profile namespace.
      </span>
    </summary>

    <div className="catalogue-content">
      Submit a Spark job in an authorized profile namespace.

      | Property     | Value                                                                                                                                          |
      | ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership)                                                   |
      | Custom role  | Yes                                                                                                                                            |
      | Also implies | [spark.job.list](/docs/reference/roles-permissions/spark#sparkjoblist), [spark.job.read](/docs/reference/roles-permissions/spark#sparkjobread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### spark.job.delete [#sparkjobdelete]

      <span className="catalogue-description">
        Delete a Spark job, subject to namespace and creator checks.
      </span>
    </summary>

    <div className="catalogue-content">
      Delete a Spark job, subject to namespace and creator checks.

      | Property     | Value                                                                                                                                          |
      | ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership)                                                   |
      | Custom role  | Yes                                                                                                                                            |
      | Also implies | [spark.job.list](/docs/reference/roles-permissions/spark#sparkjoblist), [spark.job.read](/docs/reference/roles-permissions/spark#sparkjobread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### spark.job.list [#sparkjoblist]

      <span className="catalogue-description">
        List Spark jobs in an accessible profile namespace.
      </span>
    </summary>

    <div className="catalogue-content">
      List Spark jobs in an accessible profile namespace.

      | Property     | Value                                                                                        |
      | ------------ | -------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                              |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role  | Yes                                                                                          |
      | Also implies | [spark.job.read](/docs/reference/roles-permissions/spark#sparkjobread)                       |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### spark.job.read [#sparkjobread]

      <span className="catalogue-description">
        Inspect a Spark job and its available execution details in an accessible namespace.
      </span>
    </summary>

    <div className="catalogue-content">
      Inspect a Spark job and its available execution details in an accessible namespace.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | Yes                                                                                          |
    </div>
  </details>
</Catalogue>

## Related pages [#related-pages]

* [Roles and permissions catalogue](/docs/reference/roles-permissions)
* [System roles and baseline access](/docs/reference/roles-permissions/system-roles)