# PrivateLink for Databricks Workspace on Azure

URL: https://select.dev/docs/reference/setup-guide/privatelink/privatelink-for-databricks-workspace-on-azure
Index of all SELECT docs: https://select.dev/docs/llms.txt

> How to create a PrivateLink connection from SELECT to your Databricks workspace running on Azure

Organizations using Databricks with Azure PrivateLink can still use connect SELECT to their Databricks Workspace with a few extra steps. Please reach out to your SELECT account representative to start the process.

This guide walks you through enabling Azure PrivateLink between your Databricks workspace and SELECT.

## Prerequisites

- Databricks workspace on Azure with the Premium plan
- Azure Contributor role (or higher) on the workspace's resource group
- Access to the Azure Portal

## Step 1 — Send SELECT your workspace details

SELECT needs two pieces of information to provision the private endpoint on their side. Send both to your SELECT representative:

**1\. Workspace URL**

Your workspace URL (for example, `adb-1234567890123456.1.azuredatabricks.net`).

**2\. Workspace Resource ID**

The ARM resource ID looks like:

`/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/my-rg/providers/Microsoft.Databricks/workspaces/my-workspace`

Find it in the Azure Portal under **Databricks workspace → Settings blade → Properties → Id**.

## Step 2 — Wait for SELECT to provision the private endpoint

SELECT uses the details from Step 1 to create a private endpoint in their Azure environment, connecting to your workspace. They will contact you once the endpoint is ready — this typically takes a few minutes after their deployment.

## Step 3 — Approve the private endpoint connection

Once SELECT deploys the endpoint, a pending connection request will appear in your workspace's networking settings.

In the Azure Portal:

1. Open your **Databricks workspace**
2. In the left menu, go to **Networking** (under Settings)
3. Click the **Private endpoint connections** tab
4. Find the connection named **`select-<your-workspace-id>`**
5. Select it and click **Approve**
6. Add a note if prompted (for example, "Approved for SELECT PrivateLink") and confirm

The connection state will change from **Pending** to **Approved** within a few seconds.

> **Note:** If you don't see the connection, SELECT's deployment may still be in progress. Wait a few minutes and refresh the page.

## Step 4 — Add your Databricks connection to SELECT

Once the connection is approved, add your Databricks workspace to SELECT using your standard workspace URL:

```markdown
adb-1234567890123456.1.azuredatabricks.net
```

Use this as the **Workspace URL** in your SELECT connection settings. SELECT's infrastructure will route traffic to your workspace privately via the endpoint approved in Step 3.

## Network policy (if applicable)

If your Databricks workspace has IP access lists restricting inbound connections, you may need to add SELECT's private IP ranges to the allowlist:

| IP range | Purpose |
| --- | --- |
| `10.124.0.0/28` | SELECT backend |
| `10.1.128.0/17` | The periodic job that reads your Snowflake metadata |