Not able to set up unity catalogue

prem kaushik 0 Reputation points
2025-04-23T18:37:21.93+00:00

Absolutely! Here's a detailed and professional description you can use to raise a support ticket with Azure, explaining:

  • The core issue

Environment details

Steps you've taken

Microsoft documentation and community workarounds already attempted (including the GitHub link you shared)

Request for escalation or fix


🎫 Suggested Azure Support Ticket Description


Subject: Unable to Access Databricks Account Console or Create Unity Catalog due to External Account MFA Failure


Description:

I am encountering a persistent issue when trying to enable Unity Catalog for Azure Databricks in a Pay-As-You-Go environment. I am using a Microsoft personal account (@outlook.com) as the subscription owner. My goal is to access the Databricks Account Console and enable Unity Catalog.


🧾 Environment

Azure Subscription: Pay-As-You-Go

User Account: ******@outlook.com (Microsoft personal account)

Databricks SKU: Premium

Region: East US

Workspace: Created via Azure Portal

Intended Setup: Unity Catalog Metastore via Account Console


❌ Issue Summary

When trying to access https://accounts.azuredatabricks.net, the login fails with:

Error Code: 399287 "We're having trouble verifying your account. MFA verification fails with a phone number prompt that cannot be bypassed."

The account is being treated as a guest in Azure AD, and the Microsoft MFA validation fails repeatedly. I’ve attempted both SMS and authenticator-based methods.


πŸ”„ Workarounds Attempted (Unsuccessful):

βœ… Created a new Azure AD tenant and admin user (admin@<tenant>.onmicrosoft.com)

Assigned Global Administrator role

  Assigned Owner role on subscription via IAM

  
     Still unable to fully complete Databricks Account Console access

     
     βœ… Followed community and training workaround:

     
        [https://github.com/cloudboxacademy/azure_databricks_course/blob/main/known-issues/unable-to-login-to-azure-databricks-account-console.md](https://github.com/cloudboxacademy/azure_databricks_course/blob/main/known-issues/unable-to-login-to-azure-databricks-account-console.md)

        
           Result: Same MFA verification screen, fails with error code 399287

           
           βœ… Tried to reset MFA:

           
              Visited [https://aka.ms/mfasetup](https://aka.ms/mfasetup) and [https://mysignins.microsoft.com](https://mysignins.microsoft.com/)

              
                 Unable to bypass or reset verification method due to guest account restrictions

                 
                 βœ… Attempted using `admin@<tenant>.onmicrosoft.com` to provision Unity Catalog directly in workspace

                 
                    But `Manage Account` is not visible in workspace UI, and Unity Catalog Metastore creation via Account Console is blocked without proper access.
```---
πŸ“Œ What I Need Help With

Clarify whether **Microsoft personal accounts (`@outlook.com`) can be used with Azure Databricks Account Console and Unity Catalog setup** (in PAYG scenario)

Assistance in **resetting MFA verification for external user (`******@outlook.com`)**

Guidance or intervention to **assign Account Admin access** to the newly created AAD user

Confirm **any required roles or conditional access configurations** to allow Unity Catalog setup

Any way to **bypass the Account Console** and enable Unity Catalog programmatically

---
πŸ” Expected Outcome

Ability to access [https://accounts.azuredatabricks.net](https://accounts.azuredatabricks.net/) using a supported account

Assign a Unity Catalog metastore and workspace via Account Console

Full Unity Catalog setup (metastore, catalog creation, schema, data access control)

---
Let me know if you'd like this in downloadable form (Word or Markdown), or want help attaching workspace IDs, tenant names, or logs when you raise the support ticket.Absolutely! Here's a detailed and professional description you can use to **raise a support ticket with Azure**, explaining:

The core issue

Environment details

Steps you've taken

Microsoft documentation and community workarounds already attempted (including the GitHub link you shared)

Request for escalation or fix

---
🎫 **Suggested Azure Support Ticket Description**

---
**Subject**: Unable to Access Databricks Account Console or Create Unity Catalog due to External Account MFA Failure

---
**Description**:

I am encountering a persistent issue when trying to enable Unity Catalog for Azure Databricks in a Pay-As-You-Go environment. I am using a Microsoft personal account (`@outlook.com`) as the subscription owner. My goal is to access the [Databricks Account Console](https://accounts.azuredatabricks.net/) and enable Unity Catalog.

---
🧾 Environment

**Azure Subscription**: Pay-As-You-Go

**User Account**: `******@outlook.com` (Microsoft personal account)

**Databricks SKU**: Premium

**Region**: East US

**Workspace**: Created via Azure Portal

**Intended Setup**: Unity Catalog Metastore via Account Console

---
❌ Issue Summary

When trying to access [https://accounts.azuredatabricks.net](https://accounts.azuredatabricks.net/), the login fails with:

> **Error Code: 399287** *"We're having trouble verifying your account. MFA verification fails with a phone number prompt that cannot be bypassed."*

The account is being treated as a **guest in Azure AD**, and the Microsoft MFA validation fails repeatedly. I’ve attempted both SMS and authenticator-based methods.

---
πŸ”„ Workarounds Attempted (Unsuccessful):

βœ… **Created a new Azure AD tenant and admin user** (`admin@<tenant>.onmicrosoft.com`)

   Assigned Global Administrator role
   
```yaml
  Assigned Owner role on subscription via IAM

  
     Still unable to fully complete Databricks Account Console access

     
     βœ… Followed community and training workaround:

     
        [https://github.com/cloudboxacademy/azure_databricks_course/blob/main/known-issues/unable-to-login-to-azure-databricks-account-console.md](https://github.com/cloudboxacademy/azure_databricks_course/blob/main/known-issues/unable-to-login-to-azure-databricks-account-console.md)

        
           Result: Same MFA verification screen, fails with error code 399287

           
           βœ… Tried to reset MFA:

           
              Visited [https://aka.ms/mfasetup](https://aka.ms/mfasetup) and [https://mysignins.microsoft.com](https://mysignins.microsoft.com/)

              
                 Unable to bypass or reset verification method due to guest account restrictions

                 
                 βœ… Attempted using `admin@<tenant>.onmicrosoft.com` to provision Unity Catalog directly in workspace

                 
                    But `Manage Account` is not visible in workspace UI, and Unity Catalog Metastore creation via Account Console is blocked without proper access.
```---
πŸ“Œ What I Need Help With

Clarify whether **Microsoft personal accounts (`@outlook.com`) can be used with Azure Databricks Account Console and Unity Catalog setup** (in PAYG scenario)

Assistance in **resetting MFA verification for external user (`******@outlook.com`)**

Guidance or intervention to **assign Account Admin access** to the newly created AAD user

Confirm **any required roles or conditional access configurations** to allow Unity Catalog setup

Any way to **bypass the Account Console** and enable Unity Catalog programmatically

---
πŸ” Expected Outcome

Ability to access [https://accounts.azuredatabricks.net](https://accounts.azuredatabricks.net/) using a supported account

Assign a Unity Catalog metastore and workspace via Account Console

Full Unity Catalog setup (metastore, catalog creation, schema, data access control)

---
Azure Databricks
Azure Databricks
An Apache Spark-based analytics platform optimized for Azure.
2,404 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.