cancel
Showing results for 
Search instead for 
Did you mean: 
Data Engineering
Join discussions on data engineering best practices, architectures, and optimization strategies within the Databricks Community. Exchange insights and solutions with fellow data engineers.
cancel
Showing results for 
Search instead for 
Did you mean: 

Service Account Access granted still getting as User does not have USE SCHEMA on Schema

raghunathr
New Contributor III

Hi All, 

We have ran into scenario, where Azure Data Factory connecting to Azure Data Bricks through linkedServices, 

Where its trying to connect with System Assigned Managed Identity (SAMI). 

Specific SAMI added to compute and unity catalog for usage.

show grants `6b3xxxx-0xx9-4xx4-axx9-bxxxxxxbc` on schema dev.uef_db;

-----------------------------
Principal	                        ActionType	ObjectType	ObjectKey
6b3xxxx-0xx9-4xx4-axx9-bxxxxxxbc	USE SCHEMA	CATALOG	        dev

But, still when we try to query or execute any notebooks from ADF LinkedServices (compute/delta lake connector)

User does not have USE SCHEMA on Schema 'dev.uef_db'. SQLSTATE: 42501

Any idea, where we missing permissions.

Thanks in Advance.

2 REPLIES 2

raghunathr
New Contributor III

Thanks @Retired_mod .. We found issue. SAMI given permission but it was managed and registered MI instead of using application/object id we were using MI directly. Its solved.

raghunathr
New Contributor III

Still we have trouble on external_storage location now. 

That specific Managed Identity which added to Databricks Resource now got everything needed for Unity Catalog DEV/Tables. But, Even in External Location that SPN added but still getting error as 

py4j.protocol.Py4JJavaError: An error occurred while calling o513.load. : com.databricks.sql.managedcatalog.acl.UnauthorizedAccessException: PERMISSION_DENIED: User does not have READ FILES on External Location 'dev_raw_b002'.

Any idea where its going wrong again ? @Retired_mod 

Connect with Databricks Users in Your Area

Join a Regional User Group to connect with local Databricks users. Events will be happening in your city, and you won’t want to miss the chance to attend and share knowledge.

If there isn’t a group near you, start one and help create a community that brings people together.

Request a New Group