Authorization Issue while creating first Unity catalog table

AliviaB — Thu, 19 Jun 2025 11:03:51 GMT

Hi All,

We are setting up our new UC enabled databricks workspace. We have completed the metastore setup for our workspace and we have created new catalog and schema. But while creating a table we are getting authorization issue. Below is the table script and error message.

CREATE TABLE IF NOT EXISTS mycatalog.myschema.department

(

deptcode INT,

deptname STRING,

location STRING

);

Error:shaded.databricks.azurebfs.org.apache.hadoop.fs.azurebfs.contracts.exceptions.AbfsRestOperationException) Operation failed: "This request is not authorized to perform this operation.", 403, GET, https://mystorageaccount.dfs.core.windows.net/mycontainer?upn=false&resource=filesystem&maxResults=5000&directory=data/__unitystorage/catalogs/3f9da161-4d45-4bde-a982-2737902e4969/tables/4fca3020-f6ff-4e64-9d6a-0a844682af72/_delta_log&continuation=NTU4NjA5OTE0NzQwMTQ1MDUyNyAwIDAwMDAwMDAwMDAwMDAwMDAwMDA=&timeout=90&recursive=false&st=2025-06-18T06:40:55Z&sv=2020-02-10&ske=2025-06-18T08:40:55Z&sig=XXXXX&sktid=513294a0-3e20-41b2-a970-6d30bf1546fa&se=2025-06-18T07:55:48Z&sdd=6&skoid=76563148-066d-4b3dXXXXXXXXXXXXXXXXXX&spr=https&sks=b&skt=2025-06-18T06:40:55Z&sp=rl&skv=2025-01-05&sr=d, AuthorizationFailure, , "This request is not authorized to perform this operation. RequestId:7acf4e05-901f-0099-461e-e095ff000000 Time:2025-06-18T06:55:52.8249225Z"

Additional Information: We are using Azure Databricks connector as system assigned managed identity to ad access to mystorageaccount at storage account level. We have provided Storage Account Contributor, Storage Blob Data Contributor, Storage Queue Data Contributor and Storage Table Data Contributor roles to the connector.

We have also whitelisted the Databricks IP into storage account.

Any help regarding this issue will be very helpful.

Thanks

Re: Authorization Issue while creating first Unity catalog table

cgrant — Fri, 20 Jun 2025 21:55:07 GMT

Are there locations specified for the catalog/table/schema? Or do you keep these at defaults?

Also, do you have a storage credential and external location set for mystorageaccount/mycontainer?

topic Authorization Issue while creating first Unity catalog table in Data Engineering

Authorization Issue while creating first Unity catalog table

Re: Authorization Issue while creating first Unity catalog table