Not able to set up unity catalogue

Question

Not able to set up unity catalogue

prem kaushik 0

Absolutely! Here's a detailed and professional description you can use to raise a support ticket with Azure, explaining:

The core issue

Environment details

Steps you've taken

Microsoft documentation and community workarounds already attempted (including the GitHub link you shared)

Request for escalation or fix

🎫 Suggested Azure Support Ticket Description

Subject: Unable to Access Databricks Account Console or Create Unity Catalog due to External Account MFA Failure

Description:

I am encountering a persistent issue when trying to enable Unity Catalog for Azure Databricks in a Pay-As-You-Go environment. I am using a Microsoft personal account (@outlook.com) as the subscription owner. My goal is to access the Databricks Account Console and enable Unity Catalog.

🧾 Environment

Azure Subscription: Pay-As-You-Go

User Account: ****.******@outlook.com (Microsoft personal account)

Databricks SKU: Premium

Region: East US

Workspace: Created via Azure Portal

Intended Setup: Unity Catalog Metastore via Account Console

❌ Issue Summary

When trying to access https://accounts.azuredatabricks.net, the login fails with:

Error Code: 399287 "We're having trouble verifying your account. MFA verification fails with a phone number prompt that cannot be bypassed."

The account is being treated as a guest in Azure AD, and the Microsoft MFA validation fails repeatedly. I’ve attempted both SMS and authenticator-based methods.

🔄 Workarounds Attempted (Unsuccessful):

✅ Created a new Azure AD tenant and admin user (admin@<tenant>.onmicrosoft.com)

Assigned Global Administrator role

  Assigned Owner role on subscription via IAM

  
     Still unable to fully complete Databricks Account Console access

     
     ✅ Followed community and training workaround:

     
        [https://github.com/cloudboxacademy/azure_databricks_course/blob/main/known-issues/unable-to-login-to-azure-databricks-account-console.md](https://github.com/cloudboxacademy/azure_databricks_course/blob/main/known-issues/unable-to-login-to-azure-databricks-account-console.md)

        
           Result: Same MFA verification screen, fails with error code 399287

           
           ✅ Tried to reset MFA:

           
              Visited [https://aka.ms/mfasetup](https://aka.ms/mfasetup) and [https://mysignins.microsoft.com](https://mysignins.microsoft.com/)

              
                 Unable to bypass or reset verification method due to guest account restrictions

                 
                 ✅ Attempted using `admin@<tenant>.onmicrosoft.com` to provision Unity Catalog directly in workspace

                 
                    But `Manage Account` is not visible in workspace UI, and Unity Catalog Metastore creation via Account Console is blocked without proper access.
---
📌 What I Need Help With

Clarify whether **Microsoft personal accounts (`@outlook.com`) can be used with Azure Databricks Account Console and Unity Catalog setup** (in PAYG scenario)

Assistance in **resetting MFA verification for external user (`****.******@outlook.com`)**

Guidance or intervention to **assign Account Admin access** to the newly created AAD user

Confirm **any required roles or conditional access configurations** to allow Unity Catalog setup

Any way to **bypass the Account Console** and enable Unity Catalog programmatically

---
🔍 Expected Outcome

Ability to access [https://accounts.azuredatabricks.net](https://accounts.azuredatabricks.net/) using a supported account

Assign a Unity Catalog metastore and workspace via Account Console

Full Unity Catalog setup (metastore, catalog creation, schema, data access control)

---
Let me know if you'd like this in downloadable form (Word or Markdown), or want help attaching workspace IDs, tenant names, or logs when you raise the support ticket.Absolutely! Here's a detailed and professional description you can use to **raise a support ticket with Azure**, explaining:

The core issue

Environment details

Steps you've taken

Microsoft documentation and community workarounds already attempted (including the GitHub link you shared)

Request for escalation or fix

---
🎫 **Suggested Azure Support Ticket Description**

---
**Subject**: Unable to Access Databricks Account Console or Create Unity Catalog due to External Account MFA Failure

---
**Description**:

I am encountering a persistent issue when trying to enable Unity Catalog for Azure Databricks in a Pay-As-You-Go environment. I am using a Microsoft personal account (`@outlook.com`) as the subscription owner. My goal is to access the [Databricks Account Console](https://accounts.azuredatabricks.net/) and enable Unity Catalog.

---
🧾 Environment

**Azure Subscription**: Pay-As-You-Go

**User Account**: `******@outlook.com` (Microsoft personal account)

**Databricks SKU**: Premium

**Region**: East US

**Workspace**: Created via Azure Portal

**Intended Setup**: Unity Catalog Metastore via Account Console

---
❌ Issue Summary

When trying to access [https://accounts.azuredatabricks.net](https://accounts.azuredatabricks.net/), the login fails with:

> **Error Code: 399287** *"We're having trouble verifying your account. MFA verification fails with a phone number prompt that cannot be bypassed."*

The account is being treated as a **guest in Azure AD**, and the Microsoft MFA validation fails repeatedly. I’ve attempted both SMS and authenticator-based methods.

---
🔄 Workarounds Attempted (Unsuccessful):

✅ **Created a new Azure AD tenant and admin user** (`admin@<tenant>.onmicrosoft.com`)

   Assigned Global Administrator role
   
yaml
  Assigned Owner role on subscription via IAM

  
     Still unable to fully complete Databricks Account Console access

     
     ✅ Followed community and training workaround:

     
        [https://github.com/cloudboxacademy/azure_databricks_course/blob/main/known-issues/unable-to-login-to-azure-databricks-account-console.md](https://github.com/cloudboxacademy/azure_databricks_course/blob/main/known-issues/unable-to-login-to-azure-databricks-account-console.md)

        
           Result: Same MFA verification screen, fails with error code 399287

           
           ✅ Tried to reset MFA:

           
              Visited [https://aka.ms/mfasetup](https://aka.ms/mfasetup) and [https://mysignins.microsoft.com](https://mysignins.microsoft.com/)

              
                 Unable to bypass or reset verification method due to guest account restrictions

                 
                 ✅ Attempted using `admin@<tenant>.onmicrosoft.com` to provision Unity Catalog directly in workspace

                 
                    But `Manage Account` is not visible in workspace UI, and Unity Catalog Metastore creation via Account Console is blocked without proper access.
---
📌 What I Need Help With

Clarify whether **Microsoft personal accounts (`@outlook.com`) can be used with Azure Databricks Account Console and Unity Catalog setup** (in PAYG scenario)

Assistance in **resetting MFA verification for external user (`***.******@outlook.com`)**

Guidance or intervention to **assign Account Admin access** to the newly created AAD user

Confirm **any required roles or conditional access configurations** to allow Unity Catalog setup

Any way to **bypass the Account Console** and enable Unity Catalog programmatically

---
🔍 Expected Outcome

Ability to access [https://accounts.azuredatabricks.net](https://accounts.azuredatabricks.net/) using a supported account

Assign a Unity Catalog metastore and workspace via Account Console

Full Unity Catalog setup (metastore, catalog creation, schema, data access control)

---

J N S S Kasyap 2,040 Reputation points Microsoft External Staff Moderator

2025-04-23T19:16:38.0566667+00:00
Hi @prem kaushik

Microsoft personal accounts (@outlook.com) are not officially supported for Databricks Account Console access for managing Unity Catalog.

Unity Catalog requires Account Admin access, which typically needs a user in Microsoft Entra ID (formerly Azure AD), not a personal Microsoft account.

Use an Entra ID (Azure AD) user account instead of a personal Microsoft account.

Create an Entra ID (AAD) tenant and user:

Go to https://portal.azure.com and create a new Entra ID tenant.

Add a new user (e.g., ******@yourtenant.onmicrosoft.com) and assign a strong password.

Assign roles and permissions:

Add the new user to your Azure Subscription as Owner via Access Control (IAM).

In the Databricks workspace, assign this user the Account Admin role using the Databricks Admin console (once accessible).

Access Databricks Account Console:

Sign in to https://accounts.azuredatabricks.net using the new Entra ID user.

You should now be able to configure Unity Catalog (create metastore, link workspaces, etc.).

Please refer the below Microsoft documentation for more details
https://learn.microsoft.com/en-us/azure/databricks/data-governance/unity-catalog/get-started
https://learn.microsoft.com/en-us/azure/databricks/admin/users-groups/users

I hope this information helps. Please do let us know if you have any further queries.

Kindly consider upvoting the comment if the information provided is helpful. This can assist other community members in resolving similar issues.

Thank you.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
J N S S Kasyap 2,040 Reputation points Microsoft External Staff Moderator

2025-04-24T23:52:12.1933333+00:00

@prem kaushik
Did you attempt Unity Catalog setup via Azure CLI instead of the Account Console?

Do you have another Azure AD tenant with verified domain and org-wide MFA policies, where you could try setting up Unity Catalog from scratch?
Can you provide a screenshot or exact error message when logging in with the new AAD user to the Databricks Account Console?
J N S S Kasyap 2,040 Reputation points Microsoft External Staff Moderator

2025-04-28T01:06:50.7166667+00:00

@prem kaushik
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Dileep Raj Narayan Thumula 15 Reputation points Microsoft External Staff Moderator

2025-04-28T09:55:08.26+00:00

Hello @prem kaushik The ERROR:

Error Code: 399287 "We're having trouble verifying your account. MFA verification fails with a phone number prompt that cannot be bypassed."

The above ERROR message suuggest that

Your account has been blocked from using MFA due to a bad reputation.

To unblock it, You will need to contact engineering team to have the restriction removed.

To resolve the issue, reach out to the engineering team to unblock MFA for your account.

They will remove the bad reputation from the backend, and you should be able to log in to the Azure Portal without any problems.
Dileep Raj Narayan Thumula 15 Reputation points Microsoft External Staff Moderator

2025-04-29T10:58:28.1566667+00:00

Hello @prem kaushik,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Dileep Raj Narayan Thumula 15 Reputation points Microsoft External Staff Moderator

2025-04-30T11:44:53.1066667+00:00

Hello @prem kaushik, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Your answer

J N S S Kasyap 2,040 Reputation points Microsoft External Staff Moderator

2025-04-23T19:16:38.0566667+00:00

Hi @prem kaushik

Microsoft personal accounts (@outlook.com) are not officially supported for Databricks Account Console access for managing Unity Catalog.

Unity Catalog requires Account Admin access, which typically needs a user in Microsoft Entra ID (formerly Azure AD), not a personal Microsoft account.

Use an Entra ID (Azure AD) user account instead of a personal Microsoft account.

Create an Entra ID (AAD) tenant and user:

Go to https://portal.azure.com and create a new Entra ID tenant.

Add a new user (e.g., ******@yourtenant.onmicrosoft.com) and assign a strong password.

Assign roles and permissions:

Add the new user to your Azure Subscription as Owner via Access Control (IAM).

In the Databricks workspace, assign this user the Account Admin role using the Databricks Admin console (once accessible).

Access Databricks Account Console:

Sign in to https://accounts.azuredatabricks.net using the new Entra ID user.

You should now be able to configure Unity Catalog (create metastore, link workspaces, etc.).

Please refer the below Microsoft documentation for more details
https://learn.microsoft.com/en-us/azure/databricks/data-governance/unity-catalog/get-started
https://learn.microsoft.com/en-us/azure/databricks/admin/users-groups/users

I hope this information helps. Please do let us know if you have any further queries.

Kindly consider upvoting the comment if the information provided is helpful. This can assist other community members in resolving similar issues.

Thank you.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
J N S S Kasyap 2,040 Reputation points Microsoft External Staff Moderator

2025-04-24T23:52:12.1933333+00:00

@prem kaushik
Did you attempt Unity Catalog setup via Azure CLI instead of the Account Console?

Do you have another Azure AD tenant with verified domain and org-wide MFA policies, where you could try setting up Unity Catalog from scratch?
Can you provide a screenshot or exact error message when logging in with the new AAD user to the Databricks Account Console?
J N S S Kasyap 2,040 Reputation points Microsoft External Staff Moderator

2025-04-28T01:06:50.7166667+00:00

@prem kaushik
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Dileep Raj Narayan Thumula 15 Reputation points Microsoft External Staff Moderator

2025-04-28T09:55:08.26+00:00

Hello @prem kaushik The ERROR:

Error Code: 399287 "We're having trouble verifying your account. MFA verification fails with a phone number prompt that cannot be bypassed."

The above ERROR message suuggest that

Your account has been blocked from using MFA due to a bad reputation.

To unblock it, You will need to contact engineering team to have the restriction removed.

To resolve the issue, reach out to the engineering team to unblock MFA for your account.

They will remove the bad reputation from the backend, and you should be able to log in to the Azure Portal without any problems.
Dileep Raj Narayan Thumula 15 Reputation points Microsoft External Staff Moderator

2025-04-29T10:58:28.1566667+00:00

Hello @prem kaushik,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Dileep Raj Narayan Thumula 15 Reputation points Microsoft External Staff Moderator

2025-04-30T11:44:53.1066667+00:00

Hello @prem kaushik, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Share via

Not able to set up unity catalogue

Your answer