<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Storage Credential creation fails with &amp;quot;Access Connector ... could not be found&amp;quot; in Data Engineering</title>
    <link>https://community.databricks.com/t5/data-engineering/storage-credential-creation-fails-with-quot-access-connector/m-p/168366#M55909</link>
    <description>&lt;P&gt;Subject: Storage Credential creation fails with "Access Connector ... could not be found" despite fully verified Azure configuration&lt;/P&gt;&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;I'm trying to create a storage credential (Azure Managed Identity) for Unity Catalog on a Premium Azure Databricks workspace, and consistently get this error:&lt;/P&gt;&lt;P&gt;"Azure Managed Identity Credential with Access Connector Id &amp;lt;access-connector-resource-id&amp;gt; and Managed Identity ID: for Account Id: &amp;lt;databricks-account-id&amp;gt; could not be found."&lt;/P&gt;&lt;P&gt;I've verified every piece of the Azure-side configuration via Azure CLI and it all checks out:&lt;/P&gt;&lt;P&gt;1. `az databricks access-connector show` — provisioningState is "Succeeded", identity.type is "SystemAssigned", and a valid principalId is present.&lt;BR /&gt;2. `az role assignment list --assignee &amp;lt;principalId&amp;gt;` — confirms "Storage Blob Data Contributor" is correctly assigned on both the target storage account and the resource group.&lt;BR /&gt;3. `az account show --query tenantId` — matches the Access Connector's tenantId exactly.&lt;BR /&gt;4. Confirmed there is only one Azure AD tenant on this account, so a tenant mismatch shouldn't be possible.&lt;BR /&gt;5. Tried creating the credential while logged in as two different account-admin identities — same error both times.&lt;BR /&gt;6. Also hit a separate error when trying to switch accounts in the account console: "Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application '2ff814a6-3304-4ab8-85cb-cd0e6f879c1d' in that tenant..." — not sure if related.&lt;/P&gt;&lt;P&gt;Since every Azure-side setting checks out, this feels like it could be a backend issue with how the Databricks account is resolving/linking the Access Connector, rather than anything actually misconfigured on my end.&lt;/P&gt;&lt;P&gt;Has anyone run into this and found a fix? Happy to share more diagnostic details (with IDs redacted) if it helps.&lt;/P&gt;&lt;P&gt;Thanks in advance!&lt;/P&gt;</description>
    <pubDate>Fri, 11 Sep 2026 13:12:56 GMT</pubDate>
    <dc:creator>Data_Engineer14</dc:creator>
    <dc:date>2026-09-11T13:12:56Z</dc:date>
    <item>
      <title>Storage Credential creation fails with "Access Connector ... could not be found"</title>
      <link>https://community.databricks.com/t5/data-engineering/storage-credential-creation-fails-with-quot-access-connector/m-p/168366#M55909</link>
      <description>&lt;P&gt;Subject: Storage Credential creation fails with "Access Connector ... could not be found" despite fully verified Azure configuration&lt;/P&gt;&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;I'm trying to create a storage credential (Azure Managed Identity) for Unity Catalog on a Premium Azure Databricks workspace, and consistently get this error:&lt;/P&gt;&lt;P&gt;"Azure Managed Identity Credential with Access Connector Id &amp;lt;access-connector-resource-id&amp;gt; and Managed Identity ID: for Account Id: &amp;lt;databricks-account-id&amp;gt; could not be found."&lt;/P&gt;&lt;P&gt;I've verified every piece of the Azure-side configuration via Azure CLI and it all checks out:&lt;/P&gt;&lt;P&gt;1. `az databricks access-connector show` — provisioningState is "Succeeded", identity.type is "SystemAssigned", and a valid principalId is present.&lt;BR /&gt;2. `az role assignment list --assignee &amp;lt;principalId&amp;gt;` — confirms "Storage Blob Data Contributor" is correctly assigned on both the target storage account and the resource group.&lt;BR /&gt;3. `az account show --query tenantId` — matches the Access Connector's tenantId exactly.&lt;BR /&gt;4. Confirmed there is only one Azure AD tenant on this account, so a tenant mismatch shouldn't be possible.&lt;BR /&gt;5. Tried creating the credential while logged in as two different account-admin identities — same error both times.&lt;BR /&gt;6. Also hit a separate error when trying to switch accounts in the account console: "Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application '2ff814a6-3304-4ab8-85cb-cd0e6f879c1d' in that tenant..." — not sure if related.&lt;/P&gt;&lt;P&gt;Since every Azure-side setting checks out, this feels like it could be a backend issue with how the Databricks account is resolving/linking the Access Connector, rather than anything actually misconfigured on my end.&lt;/P&gt;&lt;P&gt;Has anyone run into this and found a fix? Happy to share more diagnostic details (with IDs redacted) if it helps.&lt;/P&gt;&lt;P&gt;Thanks in advance!&lt;/P&gt;</description>
      <pubDate>Fri, 11 Sep 2026 13:12:56 GMT</pubDate>
      <guid>https://community.databricks.com/t5/data-engineering/storage-credential-creation-fails-with-quot-access-connector/m-p/168366#M55909</guid>
      <dc:creator>Data_Engineer14</dc:creator>
      <dc:date>2026-09-11T13:12:56Z</dc:date>
    </item>
    <item>
      <title>Re: Storage Credential creation fails with "Access Connector ... could not be found"</title>
      <link>https://community.databricks.com/t5/data-engineering/storage-credential-creation-fails-with-quot-access-connector/m-p/168464#M55925</link>
      <description>&lt;P&gt;&lt;a href="https://community.databricks.com/t5/user/viewprofilepage/user-id/254048"&gt;@Data_Engineer14&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Great troubleshooting so far. The fact that every Azure-side check passes cleanly but the storage credential creation still fails is a strong signal that this is a backend registration issue, not a misconfiguration on your end.&lt;/SPAN&gt;&lt;/P&gt;
&lt;DIV class="du-bois-light-typography css-zj8sjw" data-genai-markdown-block="true"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class="du-bois-light-typography css-zj8sjw" data-genai-markdown-block="true"&gt;When you create an Access Connector for Azure Databricks, Azure's Resource Provider is supposed to fire an internal callback to Databricks that registers the connector's managed identity. This registration is what allows Unity Catalog to later resolve the connector when you create a storage credential. The error you are seeing means that the registration step either never fired or failed silently when your Access Connector was originally created. Your connector exists in Azure and is perfectly healthy, but Databricks' internal credential store has no record of it.&lt;/DIV&gt;
&lt;DIV class="du-bois-light-typography css-zj8sjw" data-genai-markdown-block="true"&gt;This is a known pattern. It can happen due to transient issues during connector provisioning, timing gaps in the Resource Provider callback, or (less commonly) if the connector was created in a standalone resource group that isn't associated with the expected Databricks account.&lt;/DIV&gt;
&lt;DIV class="du-bois-light-typography css-zj8sjw" data-genai-markdown-block="true"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class="du-bois-light-typography css-zj8sjw" data-genai-markdown-block="true"&gt;Here are some options for you to try...&lt;/DIV&gt;
&lt;DIV class="du-bois-light-typography css-zj8sjw" data-genai-markdown-block="true"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV class="du-bois-light-typography css-zj8sjw" data-genai-markdown-block="true"&gt;Force a re-registration by modifying the connector's identity.&lt;SPAN&gt;&amp;nbsp;A tag-only update won't trigger the necessary callback, but changing the identity configuration will. The most reliable approach is to temporarily add a User-Assigned Managed Identity alongside your existing System-Assigned one:&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;OL&gt;
&lt;LI class="du-bois-light-typography css-zj8sjw" data-genai-markdown-block="true"&gt;&lt;SPAN&gt;&lt;SPAN&gt;Create a throwaway User-Assigned MI in the same resource group&lt;BR /&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;LI-CODE lang="python"&gt;az identity create -n temp-reregister-uai \
  -g &amp;lt;your-resource-group&amp;gt; -l &amp;lt;your-region&amp;gt;&lt;/LI-CODE&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;/LI&gt;
&lt;LI class="du-bois-light-typography css-zj8sjw" data-genai-markdown-block="true"&gt;&amp;nbsp;Update the Access Connector to include both identity types (this preserves your existing System-Assigned MI's&amp;nbsp;principalId):&lt;BR /&gt;&lt;LI-CODE lang="python"&gt;az resource update \
  --ids &amp;lt;access-connector-resource-id&amp;gt; \
  --set identity.type="SystemAssigned, UserAssigned" \
        identity.userAssignedIdentities.&amp;lt;uai-resource-id&amp;gt;={}​&lt;/LI-CODE&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/LI&gt;
&lt;LI&gt;
&lt;DIV class="du-bois-light-typography css-zj8sjw" data-genai-markdown-block="true"&gt;Retry creating the storage credential. If the callback fires successfully, it should now work.&lt;BR /&gt;&lt;BR /&gt;&lt;/DIV&gt;
&lt;/LI&gt;
&lt;LI&gt;
&lt;DIV class="du-bois-light-typography css-zj8sjw" data-genai-markdown-block="true"&gt;After confirming success, you can revert the connector back to System-Assigned only and delete the temporary UAI. The internal registration persists even after removing the User-Assigned identity.&lt;/DIV&gt;
&lt;/LI&gt;
&lt;/OL&gt;
&lt;P&gt;Alternatively, try the Databricks CLI instead of the Account Console UI.&amp;nbsp;Another community member &lt;A href="https://community.databricks.com/t5/data-engineering/unable-to-enable-unity-catalog-azure-managed-identity-credential/m-p/165972#M55509" target="_blank"&gt;reported&lt;/A&gt; that the same operation that failed in the web UI succeeded through the CLI. You can create the storage credential using.&lt;/P&gt;
&lt;LI-CODE lang="python"&gt;databricks storage-credentials create --json '{
  "name": "&amp;lt;credential-name&amp;gt;",
  "azure_managed_identity": {
    "access_connector_id": "&amp;lt;access-connector-resource-id&amp;gt;"
  }
}'&lt;/LI-CODE&gt;
&lt;P&gt;&lt;SPAN&gt;For the full setup steps, see&amp;nbsp;&lt;/SPAN&gt;&lt;A class="du-bois-light-typography css-1zhnxz" role="link" href="https://learn.microsoft.com/en-us/azure/databricks/connect/unity-catalog/cloud-storage/azure-managed-identities" rel="noopener noreferrer" data-component-type="typography_link" data-component-id="codegen_webapp_js_genai_util_markdown.tsx_71" aria-disabled="false" target="_blank"&gt;Use Azure managed identities in Unity Catalog to access storage&lt;/A&gt;&lt;SPAN&gt;.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P data-genai-markdown-block="true"&gt;In terms of the separate account-switching error..&amp;nbsp;"Selected user account does not exist in tenant 'Microsoft Services'" error with application ID&amp;nbsp;2ff814a6-3304-4ab8-85cb-cd0e6f879c1d&amp;nbsp;is a Microsoft Entra ID authentication issue, not directly related to the storage credential problem. It typically means the identity you're using to sign into the Account Console isn't recognised in the tenant associated with that application. It shouldn't block storage credential creation, but it's worth confirming that the identity you're using to log into the Databricks Account Console belongs to the same Entra ID tenant as your Access Connector's subscription.&lt;/P&gt;
&lt;P data-genai-markdown-block="true"&gt;If the identity-touch workaround and the CLI approach both fail, this is likely something that needs backend investigation by Databricks Support. Open a support case referencing the&amp;nbsp;UC_AZURE_MANAGED_IDENTITY_CREDENTIAL_NOT_FOUND&amp;nbsp;error and include your Access Connector resource ID and Databricks Account ID. The support team can verify whether the internal credential registration exists and re-trigger it if needed.&lt;/P&gt;
&lt;P data-genai-markdown-block="true"&gt;Hope this helps.&lt;/P&gt;
&lt;P class="p1"&gt;&lt;FONT size="2" color="#FF6600"&gt;&lt;STRONG&gt;&lt;I&gt;If this answer resolves your question, could you mark it as “Accept as Solution”? That helps other users quickly find the correct fix.&lt;/I&gt;&lt;/STRONG&gt;&lt;/FONT&gt;&lt;I&gt;&lt;/I&gt;&lt;/P&gt;
&lt;DIV class="du-bois-light-typography css-zj8sjw" data-genai-markdown-block="true"&gt;&amp;nbsp;&lt;/DIV&gt;</description>
      <pubDate>Sun, 13 Sep 2026 13:39:58 GMT</pubDate>
      <guid>https://community.databricks.com/t5/data-engineering/storage-credential-creation-fails-with-quot-access-connector/m-p/168464#M55925</guid>
      <dc:creator>Ashwin_DSA</dc:creator>
      <dc:date>2026-09-13T13:39:58Z</dc:date>
    </item>
    <item>
      <title>Re: Storage Credential creation fails with "Access Connector ... could not be found"</title>
      <link>https://community.databricks.com/t5/data-engineering/storage-credential-creation-fails-with-quot-access-connector/m-p/169533#M56119</link>
      <description>&lt;P&gt;Thank you so much for the help! The Storage Credential creation was failing with the "Access Connector ... could not be found" error, and the workaround you provided worked and resolved it completely. Really appreciate you taking the time to walk through this — thanks a lot!&lt;/P&gt;</description>
      <pubDate>Wed, 23 Sep 2026 05:54:30 GMT</pubDate>
      <guid>https://community.databricks.com/t5/data-engineering/storage-credential-creation-fails-with-quot-access-connector/m-p/169533#M56119</guid>
      <dc:creator>Data_Engineer14</dc:creator>
      <dc:date>2026-09-23T05:54:30Z</dc:date>
    </item>
  </channel>
</rss>

