Databricks Account Admin Access

Question

Databricks Account Admin Access

Trinh Dong 0

Hi everyone,

I’m trying to regain access to the Databricks Account Admin role for our Azure Databricks account.

It appears that the previous Account Admin was an employee who has since left the company. Currently, no active member of our team has Account Admin access.

I contacted Databricks Support, but they advised me to contact Azure Support for this issue.

Has anyone encountered a similar situation? What is the correct process to identify the current Account Owner/Admin and transfer the role to an active employee?

Thanks!

Jose Benjamin Solis Nolasco 12,691 Reputation points Volunteer Moderator

2026-09-22T13:51:17.8633333+00:00
Welcome to Microsoft Q&A!

@Trinh Dong I hope you are doing well,

If the previous Databricks Account Admin has left the company and no current employee has Account Admin access, the supported recovery path is through a Microsoft Entra ID Global Administrator in the same tenant associated with the Azure Databricks account.

Have an active user with the Global Administrator role sign in to the Databricks account console at:

https://accounts.azuredatabricks.net

using their Microsoft Entra ID credentials. In Azure Databricks, a Global Administrator can bootstrap account access and obtain Account Admin permissions for the Databricks account. Once access is regained, they can assign the Account Admin role to other appropriate users from User Management in the account console.

A few important points:

Being an Azure Owner, Contributor, or Workspace Admin does not automatically grant Databricks Account Admin permissions.

The user who originally created the workspace is not necessarily the Databricks Account Admin.

Make sure the sign-in is performed against the correct Microsoft Entra tenant associated with the Databricks account.

Let us know
Trinh Dong 0 Reputation points

2026-09-23T04:46:07.5866667+00:00
Hello @Jose Benjamin Solis Nolasco

We have already followed the suggested recovery path. Our Microsoft Entra ID Global Administrator signed in to https://accounts.azuredatabricks.net using the correct tenant credentials. However, the user is still only able to access the workspace-level administration interface, and the Databricks Account Admin console/role is not available.

We have tried this multiple times, including signing out and signing back in, but the Global Administrator is still not being granted Account Admin access.

At this point, could you please help us clarify the following:

Is there any way from the Azure Portal or Microsoft Entra ID to identify which user currently holds the Azure Databricks Account Admin role for this Databricks account?

If the original Account Admin is an employee who has left the company, is there an Azure-side procedure to recover or reassign the Databricks Account Admin role from that user to an active employee?

If the Account Admin role is managed entirely at the Databricks account level and cannot be viewed or recovered from Azure, could you please advise the correct escalation/recovery process for an orphaned Databricks account?

We can provide the Azure subscription ID, Databricks workspace details, tenant ID, and the affected user's information if needed.

We would specifically like to determine whether the existing Databricks Account Admin can be identified from the Azure/Entra side, or whether this requires Databricks to recover the account-level administrator.

Thank you

1 answer

Your answer

Jose Benjamin Solis Nolasco 12,691 Reputation points Volunteer Moderator

2026-09-22T13:51:17.8633333+00:00

Welcome to Microsoft Q&A!

@Trinh Dong I hope you are doing well,

If the previous Databricks Account Admin has left the company and no current employee has Account Admin access, the supported recovery path is through a Microsoft Entra ID Global Administrator in the same tenant associated with the Azure Databricks account.

Have an active user with the Global Administrator role sign in to the Databricks account console at:

https://accounts.azuredatabricks.net

using their Microsoft Entra ID credentials. In Azure Databricks, a Global Administrator can bootstrap account access and obtain Account Admin permissions for the Databricks account. Once access is regained, they can assign the Account Admin role to other appropriate users from User Management in the account console.

A few important points:

Being an Azure Owner, Contributor, or Workspace Admin does not automatically grant Databricks Account Admin permissions.

The user who originally created the workspace is not necessarily the Databricks Account Admin.

Make sure the sign-in is performed against the correct Microsoft Entra tenant associated with the Databricks account.

Let us know
Trinh Dong 0 Reputation points

2026-09-23T04:46:07.5866667+00:00

Hello @Jose Benjamin Solis Nolasco

We have already followed the suggested recovery path. Our Microsoft Entra ID Global Administrator signed in to https://accounts.azuredatabricks.net using the correct tenant credentials. However, the user is still only able to access the workspace-level administration interface, and the Databricks Account Admin console/role is not available.

We have tried this multiple times, including signing out and signing back in, but the Global Administrator is still not being granted Account Admin access.

At this point, could you please help us clarify the following:

Is there any way from the Azure Portal or Microsoft Entra ID to identify which user currently holds the Azure Databricks Account Admin role for this Databricks account?

If the original Account Admin is an employee who has left the company, is there an Azure-side procedure to recover or reassign the Databricks Account Admin role from that user to an active employee?

If the Account Admin role is managed entirely at the Databricks account level and cannot be viewed or recovered from Azure, could you please advise the correct escalation/recovery process for an orphaned Databricks account?

We can provide the Azure subscription ID, Databricks workspace details, tenant ID, and the affected user's information if needed.

We would specifically like to determine whether the existing Databricks Account Admin can be identified from the Azure/Entra side, or whether this requires Databricks to recover the account-level administrator.

Thank you

Answer 1

The supported recovery path is to use a Microsoft Entra ID Global Administrator in the same tenant as the Azure Databricks account.

Have an active employee with the Global Administrator role sign in to the Azure portal with that tenant.
Then go to https://accounts.azuredatabricks.net and sign in with Microsoft Entra ID.
On first successful sign-in, that Global Administrator is automatically granted the Databricks Account Admin role to bootstrap account access.
In the account console, open User management.
Select the target employee.
On the Roles tab, enable Account admin.
After another user has Account Admin, the Global Administrator is no longer required for ongoing Databricks account administration and can be removed from the Databricks account if appropriate.

Important points:

Creating the first Azure Databricks workspace does not automatically make that user an Account Admin.
Workspace Admin, Azure Owner, or Azure Contributor access is not the same as Databricks Account Admin access.
If sign-in to the account console redirects to a workspace or fails, verify the sign-in is happening in the correct Microsoft Entra tenant associated with the Databricks account.
To access the account console for a non-default tenant, open it from a workspace in the preferred tenant.

To identify whether the company still has directory-level admin access, a company admin can also check in Azure:

Sign in to the Azure admin portal.
Open Microsoft Entra ID.
Select Domain names.
Confirm the company domain is present.

If there is a complete loss of tenant admin access, the documented path is Administrator Takeover for an unmanaged directory.