Serverless and private connectivity - unable to create managed table

[Lalit_asky]

Hi,

I am trying to setup Private connectivity for my serverless compute to my managed storage which is at the catalog level.

I created the NCC, endpoints, external location and credentials with the required access. My storage account public network access is disabled. Everything checks out fine, but when I am trying to create a managed table in the catalog, I am getting this error.

This Azure storage request is not authorized. The storage account's 'Firewalls and virtual networks' settings may be blocking access to storage services. Please verify your Azure storage credentials or firewall exception settings.

I should not bee needing to do anything with the firewall and virtual network when my pubic network access is disabled and I am trying to use private endpoints. What am I doing wrong?

Thanks

[nayan_wylde]

Try to do an nslooup to your storage from a notebook.

# From your Databricks cluster, test DNS resolution

%sh nslookup yourstorageaccount.blob.core.windows.net

# Should resolve to private IP, not public IP

   # Check if storage account allows traffic from your private endpoint subnet

az storage account show \
  --name yourstorageaccount \
  --resource-group yourresourcegroup \
  --query "networkRuleSet"