Unable to read secrets from azure key vault in databricks

Question

Hi All,

I want to read secrets from azure key vault in databricks using dbutils.secrets.get() function. However, this is not working because of RBAC roles and permission. I don't understand though I am the owner of databricks and key vault resource still not able to access one in the another.

Until now I have supplied key vault administrator role myself and service principal in key vault. Still it is not working.

Can you please help me ?

Answer 1

@Sangram Mohanty

Thank you for posting your queries on Microsoft. From above description I could understand that you have Owner RBAC role on both KeyVault and databricks but still you end up getting following error when trying to list the secrets in KeyVault.

Wrapped Message: Status code 403, {"error" : {"code": "Forbidden" , "message" : "Caller is not authorized to perform action on resource.

Please do correct me if this is not the case by responding in the comments section.

As per secret scopes (Configure your Azure key vault instance for Azure Databricks) The Azure role-based access control permission model is not currently supported with Azure Databricks.

Solution:

You must add the identity in the access policy blade:

then you set the required permissions for the secret scope:

later select the corresponding service principal of your databrick:

And then you create the policy [

Please do let me know if you have any further queries on this.

Thanks,

Akshay Kaushik

Please "Accept the answer" (Yes) and share your feedback if the suggestion answers you’re your query. This will help us and others in the community as well.