Question 104394 in Azure Question posted in
The official documentation to get you started can be found here.

is Databricks access connector trusted resource in Azure?

I’m trying to set up the external location for the unity catalog. it was able to connect to storage while trying to test a connection in which storage access is limited to selected vnets and ips. but I’m getting a 403 error while accessing the storage from the notebook even adding the blob contributor access to managed identity. Did I miss anything?

my assumption is since I added a connector to the trusted resources it will bypass the network rules.

Tags:

2

Answers


  1. 0

    Databricks throwing 403 error

    The main reason for 403 error is related to authorization issues for accessing azure storage account to avoid access related issues Assign the application to a role, make sure to assign the Storage Blob Data Contributor role to the service principal.

    You need to have only (Storage Blob Data Contributor) Role specified on your storage for your service principal. To assign Storage Blob Data Contributor roles using portal follow this link.

    • I have created demt1 storage account for demo, open Access controls -> Role assignment

    ![enter image description here](https://i.imgur.com/a140fKd.png

    • Under Role assignment select Storage Blob Data Contributor created initially
      enter image description here

    • To check if the role is assigned open Access control -> Check Access -> Check access
      and search for databricks

    enter image description here

    enter image description here

    • Under Current assignments there will be assigned role

    enter image description here

    • Open databricks account and try to access storage by mounting an existing container

    enter image description here

    Additional Settings

    enter image description here

    Login or Signup to reply.
  2. 0

    Try adding the Databricks’ workspace managed identity as a Storage Blob Data Contributor.

    IAM for Databricks Managed Identity

    You’ll also want to add the relevant IAM conditional access, such as Read / Write permissions.

    Conditional Access for Managed Identity

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search