Hi @phguk ,

To make it work you need to assign role of Key Vault Secret User to built in databricks service principal. Key vault administrator role that you picked is about control plane in azure. (If you are interested in this topic type in Google azure control plane vs data plane).

To simplify things, just follow below video and it'll work 🙂

https://youtu.be/NQv8a8MSVls