topic Re: Not able to creare Secret scope in Azure databricks in Data Engineering

Not able to creare Secret scope in Azure databricks

JPNP — Wed, 20 Aug 2025 12:19:08 GMT

Hello,

I am trying to create the Azure Key Vault-backed secret scope, but it failing with the below error, I have tried to clear the cache, and logged out , used incognito browser as well but not able to create a scope. Can you please help here ?

Re: Not able to creare Secret scope in Azure databricks

szymon_dybczak — Wed, 20 Aug 2025 14:17:37 GMT

Hi @JPNP ,

Maybe try with the Databricks CLI? Even if the command below doesn’t succeed, at least the error message could be more meaningful.

databricks secrets create-scope \ --scope keyvaultscope \ --scope-backend-type AZURE_KEYVAULT \ --resource-id "/subscriptions/<sub-id>/resourceGroups/<rg>/providers/Microsoft.KeyVault/vaults/<vault-name>" \ --dns-name "https://<vault-name>.vault.azure.net/"

Re: Not able to creare Secret scope in Azure databricks

trailblazer — Thu, 28 Aug 2025 20:47:43 GMT

hi, did you manage to resolve this, I have the same error but the error message is not very helpful.

Re: Not able to creare Secret scope in Azure databricks

Yogesh_Verma_ — Fri, 29 Aug 2025 03:44:08 GMT

If the UI keeps failing with that vague error, the CLI approach suggested above is the best next step, since it usually gives a clearer error message. Also make sure that:

The service principal you’re using to create the scope has Key Vault Administrator permissions on the vault.

The resource ID and DNS name are copied exactly as shown in the Azure portal (any typo or extra space will cause failures).

The Databricks workspace is in the same Azure region as the Key Vault (cross-region secret scopes are not supported).

If those checks look good but it still fails, I’d recommend running the CLI command with --debug to capture the full error details, which will help narrow down whether it’s a permissions issue or a configuration mismatch.