A cloud-based identity and access management service for securing user authentication and resource access
The reported behavior matches an account-console access and tenant-context issue, not a workspace health issue.
Key points:
- Being a Microsoft Entra ID Global Administrator or Azure Subscription Owner does not automatically make a user an Azure Databricks Account Admin.
- The Azure Databricks account console is where account admins manage Unity Catalog metastores, users, groups, and account-level settings.
- If no user in the Microsoft Entra ID tenant has logged in to the account console before, the first account admin must be established by a Microsoft Entra ID Global Administrator by signing in to the account console.
- If an account admin already exists, that existing account admin must grant the Account admin role.
Recommended path:
- Sign in to the Azure Portal with the Global Administrator account.
- Open the Azure Databricks account console.
- If this is the first login for the tenant, Azure Databricks automatically creates the account admin role for that Global Administrator.
- In the account console, go to User management.
- Select the target user.
- On the Roles tab, enable Account admin.
Important checks for the reported error:
- The Azure Databricks service application ID is
2ff814a6-3304-4ab8-85cb-cd0e6f879c1d. - If the account is in multiple Microsoft Entra ID tenants, opening the account console URL directly can take the session to the default tenant. To reach the correct tenant’s account console, access the account console from within a workspace in the preferred tenant using Manage account.
- The account ID can only be viewed in the account console. It does not display inside a workspace.
For the current scenario, the most likely causes are:
- the sign-in is landing in the wrong Microsoft Entra tenant context, or
- an Azure Databricks Account Admin already exists and the current user has not been granted the Account admin role.
Once account-console access is working, the account ID can be copied from the menu next to the username in the upper-right corner of the account console, and Unity Catalog metastore management can be performed there.
References: