@Hubert Dudek​ Thanks for taking the time to reply. I think we're talking apples and oranges unfortunately. I didn't do VNET injection so the VNET and subnets in question are a *managed* VNET in the Databricks managed resource group. You are not allowed to make any changes to it directly. What you describe is bringing your own VNET which works perfectly, of course. Any idea how to make this work when VnetInjection=No?