Azure Databricks account api can't auth

[pawelmitrus]

Hi,

does anyone know about any existing issue with azure databricks account api? I cannot do below:

1. login with cli `databricks auth login --account-id <acc_id>, this is what I get https://adb-MY_ID.azuredatabricks.net/oidc/accounts/MY_ACC_ID/v1/authorize?client_id=databricks-cli&...

while login to the workspace works ok

2. can't assign a workspace to a metastore from TF - 403 workspace doesn't exist (all access rights seems to be ok, checked 3x already), it's trying to POST on https://docs.databricks.com/api/azure/account/accountmetastoreassignments/create, btw. 403 is not even in docs

Any ideas folks? 🙂

[Yeshwanth]

@pawelmitrus good day!

Please check the authentication types available for authenticating with Accounts API: https://learn.microsoft.com/en-us/azure/databricks/dev-tools/auth/

Kind regards,

Yesh

[pawelmitrus]

Hi Yesh,

could you please be more specific which part of that docs I'd like me to check? I've been using this docs already, that's why I'm confused

Thanks, Pawel

[Yeshwanth]

@pawelmitrus , could you please confirm what authentication mechanism you are using to make the API request?

[pawelmitrus]

UPDATE

Solved, the very same solution started to work today from running a pipeline with tf - M2M auth. with a service principal with fed auth. That's the 2 from my above post.

When trying to follow these steps https://learn.microsoft.com/en-us/azure/databricks/dev-tools/auth/oauth-u2m#cli I'm still getting the same error. This is the 1 from my above post. 

Pawel