How to resolve this error "Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application '2ff814a6-3304-4ab8-85cb-cd0e6f879c1d' in that tenant. The account needs to be added as an external user in the tenant first."

avinash jha 0 Reputation points
2025-09-02T05:57:01.73+00:00

How to resolve this error "Selected user account does not exist in tenant 'Microsoft Services' and cannot access the application '2ff814a6-3304-4ab8-85cb-cd0e6f879c1d' in that tenant. The account needs to be added as an external user in the tenant first."

User's image

I have created my accounton the Azure portal and I have already given "Owner" role assignment wherever possible at all account as well as workspace level but still it is giving me this error when I am trying to open this link for setting up Unity Catalog settings as I was unable to see the "Admin console" option in my Databricks workspace settings menu.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Raja Pothuraju 43,660 Reputation points Microsoft External Staff Moderator
    2025-09-02T07:15:34.6+00:00

    Hello avinash jha,

    Based on the error and the account setup (******@gmail.com), this issue typically occurs when:

    • The Databricks account console is trying to authenticate against the wrong Azure Entra tenant, or
    • Your user identity was created as an external guest user (#EXT#) and needs to match the expected account context.

    To resolve this:

    • Go to the Azure Portal → Azure Entra ID → Users, and check if your user exists there with #EXT# in the name (e.g., xxxxxxxxx_gmail_com#EXT#@<tenant>.onmicrosoft.com).
    • If that user exists, try logging in to https://accounts.azuredatabricks.net using that #EXT# username.
    • You may need to reset the password for that #EXT# identity to log in successfully.
    • Once logged in, you should be able to access the Databricks Account Console as an account admin.

    This issue often appears when using a Microsoft personal account (MSA) like Gmail during setup in an enterprise Azure environment.

    For more information, please refer this similar issue posted in Q&A forum or else watch this youtube video.

    Let me know if you'd like help confirming the user format or if access still fails after these steps.

    I hope this information helps. Please do let us know if you have any further queries.


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.