Error when creating Access Connector for Azure Databricks

Question

So, just created storage, and would like to setup the access connector, and faces the below error.

Anyone seen this before ?

All insights are very much appreciated

Answer 1

I think the error you are getting often arises due to permission issues when setting up the access connector for Azure Databricks. Here are a few things to check to help troubleshoot:

You may need to verify that the user setting up the access connector has the necessary permissions on the resource group containing the Azure Databricks and storage resources. Specifically, they need Owner or Contributor permissions on both the resource group and the storage account.

The error may relate to missing roles for the managed identity linked to the access connector. Make sure the Databricks managed identity has the following roles assigned on the storage account:

• Storage Blob Data Contributor (for full access to storage containers)
• Storage Blob Data Reader (if only read access is needed)

Don't forget when creating the access connector, specify the correct subscription, resource group, and storage account. Confirm that the managed identity linked to the access connector is assigned properly, as this step is crucial to ensure that Azure Databricks can access the storage account.

Answer 2

Hi @Anders Thøgersen

Greetings & Welcome to Microsoft Q&A forum! Thanks for posting your query!

It seems that you are encountering an error when creating an Access Connector for Azure Databricks. Here are a few suggestions that could assist you in addressing your concern:

Ensuring that the required resource providers are registered is essential, as missing registrations can lead to issues with resource creation.

• Check and Register Resource Providers in the Azure Portal.
• Go to Azure Portal.
• Navigate to Subscriptions and select the relevant subscription.
• In the left pane, select Resource providers.
• Search for the following resource providers:
  • Microsoft.Authorization
  • Microsoft.ManagedIdentity
• If either of them shows a status of NotRegistered, click Register to register it.

Ensure that the Azure Databricks service principal has the necessary permissions to create an Access Connector.

• Check that the Azure Databricks service principal is correctly configured and has the necessary credentials to authenticate with Azure.
• Verify that the Azure Databricks workspace and the Azure subscription are in the same Azure Active Directory tenant.

For more details please refer: https://learn.microsoft.com/en-us/azure/databricks/admin/users-groups/service-principals.

Please refer to the thread: https://learn.microsoft.com/en-us/azure/databricks/admin/users-groups/service-principals which might help you.

I hope this information helps. Please do let us know if you have any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Thank you.