I have created a Azure databricks and put into a vnet. And I have a key vaults .
The key vaults are blocked all networks and I added the vnet of databricks to access key vaults.
however I got the following error :

However , when I set the following to yes... it is ok to access...... 
Also when I use https://adb-.azuredatabricks.net#secrets/createScope
to create secret scope . It will add "AzureDatabricks" APP ID to my key vault in the access policies ... is it normal ?
what am I missing ??