https://community.databricks.com/t5/data-engineering/connect-to-storage-with-private-endpoint-from-workspace/m-p/53947#M29938 <P>We know that Databricks with VNET injection (our own VNET) allows is to connect to blob storage/ ADLS Gen2 over private endpoints and peering. This is what we typically do.</P><UL><LI>We have a client who created Databricks with EnableNoPublicIP=No (secure cluster connectivity) and VnetInjection=No. So it’s using a managed VNET in the Databricks managed resource group and expose with public IP. We’re wondering if we still can make it connect to blob storage/ ADLS Gen2 over private endpoints. Or do we need to delete and recreate the Databricks workspace with VNET injection?</LI><LI>We want use Oauth2 with Service Principal with Storage Blob Data Contributor as role set on the blob storage/ ADLS Gen2.</LI><LI>We want to mount in Workspace with Service Principal credentials</LI><LI>In customer Workspace, UC is not activated, no possibility via UC access connector.</LI><LI><SPAN>So basically my question is can we use this workspace setup EnableNoPublicIP=No and VnetInjection=No to access storage with private endpoint use mounting?</SPAN></LI></UL> Mon, 27 Nov 2023 12:12:20 GMT jx1226 2023-11-27T12:12:20Z https://community.databricks.com/t5/data-engineering/connect-to-storage-with-private-endpoint-from-workspace/m-p/53947#M29938 <P>We know that Databricks with VNET injection (our own VNET) allows is to connect to blob storage/ ADLS Gen2 over private endpoints and peering. This is what we typically do.</P><UL><LI>We have a client who created Databricks with EnableNoPublicIP=No (secure cluster connectivity) and VnetInjection=No. So it’s using a managed VNET in the Databricks managed resource group and expose with public IP. We’re wondering if we still can make it connect to blob storage/ ADLS Gen2 over private endpoints. Or do we need to delete and recreate the Databricks workspace with VNET injection?</LI><LI>We want use Oauth2 with Service Principal with Storage Blob Data Contributor as role set on the blob storage/ ADLS Gen2.</LI><LI>We want to mount in Workspace with Service Principal credentials</LI><LI>In customer Workspace, UC is not activated, no possibility via UC access connector.</LI><LI><SPAN>So basically my question is can we use this workspace setup EnableNoPublicIP=No and VnetInjection=No to access storage with private endpoint use mounting?</SPAN></LI></UL> Mon, 27 Nov 2023 12:12:20 GMT https://community.databricks.com/t5/data-engineering/connect-to-storage-with-private-endpoint-from-workspace/m-p/53947#M29938 jx1226 2023-11-27T12:12:20Z