Forbidden error while accessing S3 data

...

Table creation fails with security exception

Learn what to do when table creation fails with a security exception....

Troubleshoot key vault access issues

Troubleshoot Azure key vault access issues. Verify firewall. Enable secrets....

Connection retries take a long time to fail

The default Apache Hadoop values for connection timeout and retry are high, reduce the values for quicker failures....

SSL exception when connecting to GCP secret manager

GCP secret manager requires GCM cipher suites to be installed on your cluster. Databricks Runtime 10.4 LTS and above have GCM cipher suites enabled by default....

Search audit logs for connections from prohibited IP addresses

Use audit logs to review and validate connection attempts to your workspace....

"Unable to update Group Push mapping target" error when syncing Okta groups to workspace

You cannot SCIM sync users and groups directly to the workspace when identity federation is enabled....

Bulk update workflow permissions for a group

Use this sample code to update a single group's permissions for all the jobs in a workspace....

Restricting sensitive data in the workspace

Store your data in a way that makes permissions management easier....

Unable to edit the Manage Principal for AKV-backed secret scopes in the Databricks UI

Edit the Manage Principal value via CLI or REST API. ...

CORS policy error when trying to run Databricks API from a browser-based application

Implement a server-server communication model. ...

Authorization error when trying to retrieve subnet information after saving locally

Use a script that leverages the Network Configuration Controller (NCC) API to fetch subnet information dynamically, and then allowlist the subnets....

Attempting to connect to SharePoint from a Databricks notebook gives a 404 'Not Found' error

Use a space instead of %20 in the file path....

Acquire app-only access token failed error when trying to connect to SharePoint Online from an on-premises Databricks instance

Confirm network connectivity or if none, work with your internal networking team to ensure access to login.microsoftonline.com on port 443....

Running general queries against anonymous or temporary functions fails with INSUFFICIENT_PERMISSIONS error

Provide the affected entity with the required permission from the workspace admin level, or in Databricks SQL delete the spark.databricks.acl.sqlOnly true setting....

Cross-cloud Delta Sharing query results in 403 response

Allowlist the recipient workspace’s Egress IP on storage firewall....

Creating a PAT or OAuth token to access Azure Databricks

Instructions for creating the PAT using the CLI or curl and link to OAuth instructions provided....

Granting SELECT permissions to specific user groups on a subset of tables only

Use SQL to manually grant permission or the Catalog UI. ...

SSO SAML failure when authenticating in Databricks using Active Directory Federation Services (AD FS)

Update the emailaddress in AD FS to remove any trailing newline or whitespace characters....

OIDC Single Sign-On authentication error during login

Ensure the client secret is valid and troubleshoot using a HAR file to identify the root cause....

DS_RESOURCE_NOT_FOUND_ON_DS_SERVER error when a data recipient tries to access views from a dedicated cluster

Utilize TOKEN-based sharing....

How to fetch Databricks resource permissions

Use the API to retrieve and display members of a group and their access permissions in your workspace....

Users with Reader role in Azure appearing in Databricks workspace admin group

Review and adjust role assignments in the Azure portal....

Delta Share not visible in "Shared with Me" section

Have the metastore admin use SQL in a notebook or the Databricks UI to grant the USE_PROVIDER privilege....

Creating an Azure Key Vault-backed secret scope with the Databricks CLI fails with a userAADToken error

Ensure the authentication is properly configured in the .databrickscfg file....

Getting “site can’t be reached” error when trying to access workspace

Check if the workspace has an entry in your custom DNS server....

Error when trying to migrate from Databricks Runtime 10.4 LTS to 14.3 LTS

Run the permissions necessary on the external table....

Users being provisioned in Databricks outside of SCIM

Disable the "Auto user creation" setting....

Encountering an error when trying to connect to Sybase DB using secure port 10996

Modify the JDBC connection string to include the necessary SSL configuration parameters....

EC2 instance is performing an unusual DNS over HTTPS communication to Google DNS

This is a safe, and known, Ngrok fallback mechanism. No action required....