I have a databricks workspace, that was not connected to Unity Catalog. And at the time, I created Workspace Groups. Now Unity Catalog is enabled on our workspace, and I want to migrate our Workspace Group to a Account Group.

So I tried to specify a new provider of databricks with host https://accounts.azuredatabricks.net (Azure), and add a provider argument to the databricks_group data.

Before:

provider "databricks" {
  azure_workspace_resource_id = module.databricks_01.id
  azure_client_id             = local.service_principal_application_id
  azure_client_secret         = var.secrets.SECRET
  azure_tenant_id             = var.secrets.TENANT_ID
}

resource "databricks_group" "compute_group_aml_databricks" {
  display_name               = local.aml_group_name
  workspace_access           = true
  databricks_sql_access      = true
  allow_cluster_create       = false
  allow_instance_pool_create = false
  force                      = true
}

After

provider "databricks" {
  azure_workspace_resource_id = module.databricks_01.id
  azure_client_id             = local.service_principal_application_id
  azure_client_secret         = var.secrets.SECRET
  azure_tenant_id             = var.secrets.TENANT_ID
}
provider "databricks" {
    alias                       = "accounts"
    azure_workspace_resource_id = "https://accounts.azuredatabricks.net"
    azure_client_id             = local.service_principal_application_id
    azure_client_secret         = var.secrets.SERVICE_PRINCIPAL_DATALAB_SECRET
    azure_tenant_id             = var.secrets.TENANT_ID
 }

resource "databricks_group" "compute_group_aml_databricks" {
  provider                   = databricks.accounts
  display_name               = local.aml_group_name
  workspace_access           = true
  databricks_sql_access      = true
  allow_cluster_create       = false
  allow_instance_pool_create = false
  force                      = true
}

But I get this error:

│ Error: cannot read group: failed during request visitor: default auth: azure-client-secret: resolve host: resolve workspace: Get “https://management.azure.comhttps//accounts.azuredatabricks.net?api-version=2018-04-01”: dial tcp: lookup management.azure.comhttps on xx.xxx.xx.xx: no such host. Config: azure_workspace_resource_id=https://accounts.azuredatabricks.net, azure_client_secret=***, azure_client_id=xxxxxxxxxxxxxxxxxx, azure_tenant_id=xxxxxxxxxxxxxxxxxxxx. Env: ARM_CLIENT_SECRET, ARM_CLIENT_ID, ARM_TENANT_ID

The service principal used on this provider is Account Admin on https://accounts.azuredatabricks.net/