Not able to creare Secret scope in Azure databricks

JPNP
Databricks Partner

‎08-20-2025 05:19 AM

Hello,

I am trying to create the  Azure Key Vault-backed secret scope, but it failing with the below error, I have tried to clear the cache, and logged out , used incognito browser as well but not able to create a scope. Can you please help here ?

JPNP_0-1755692310711.jpeg

 

0 Kudos

szymon_dybczak
Esteemed Contributor III

‎08-20-2025 07:17 AM

Hi @JPNP ,

Maybe try with the Databricks CLI? Even if the command below doesn’t succeed, at least the error message could be more meaningful.

databricks secrets create-scope \
  --scope keyvaultscope \
  --scope-backend-type AZURE_KEYVAULT \
  --resource-id "/subscriptions/<sub-id>/resourceGroups/<rg>/providers/Microsoft.KeyVault/vaults/<vault-name>" \
  --dns-name "https://<vault-name>.vault.azure.net/"

 

0 Kudos

trailblazer
New Contributor III

‎08-28-2025 01:47 PM

hi, did you manage to resolve this, I have the same error but the error message is not very helpful. 

0 Kudos

Yogesh_Verma_
Contributor II

‎08-28-2025 08:44 PM


If the UI keeps failing with that vague error, the CLI approach suggested above is the best next step, since it usually gives a clearer error message. Also make sure that:

The service principal you’re using to create the scope has Key Vault Administrator permissions on the vault.

The resource ID and DNS name are copied exactly as shown in the Azure portal (any typo or extra space will cause failures).

The Databricks workspace is in the same Azure region as the Key Vault (cross-region secret scopes are not supported).

If those checks look good but it still fails, I’d recommend running the CLI command with --debug to capture the full error details, which will help narrow down whether it’s a permissions issue or a configuration mismatch.

Yogesh Verma