I don't remember exactly how I solved this issue but I think I've added the following permissions on the metastore for the SPN through the Databricks API (you may not need all of them): CREATE_CATALOG, CREATE_CONNECTION, CREATE_EXTERNAL_LOCATION, CREATE_PROVIDER, CREATE_RECIPIENT, CREATE_SHARE, CREATE_STORAGE_CREDENTIAL

Please confirm if this solves your issue.