[ISSUE] Cannot update permissions for workspace: Cannot remove admins's CAN_MANAGE permission

[mrpowerus]

Hi team,

An issue occurs when modifying the permissions on the root level of the workspace.

Configuration

resource "databricks_permissions" "root_workspace_permissions" {
  directory_id = "0" # Root folder of the databricks workspace
  access_control {
    group_name       = "AAD_SDP_Data_Engineers"
    permission_level = "CAN_READ"
  }

  access_control {
    group_name       = "AAD_SDP_Data_Operators"
    permission_level = "CAN_READ"
  }
}

Expected Behavior

When running terraform apply, the permissions should set.

Actual Behavior

terraform plan runs successfully. However, terraform apply gives the following error

│ Error: cannot update permissions: Cannot remove admins's CAN_MANAGE permission on 0
│ 
│   with databricks_permissions.root_workspace_permissions,
│   on workspace.tf line 35, in resource "databricks_permissions" "root_workspace_permissions":
│   35: resource "databricks_permissions" "root_workspace_permissions" {
│ 
╵

Steps to Reproduce

1. Run terraform init
2. Run terraform plan (which will run successfully
3. Run terraform apply

Terraform and provider versions

Terraform v1.3.5
on windows_amd64
+ provider registry.terraform.io/databricks/databricks v1.13.0
+ provider registry.terraform.io/hashicorp/azuread v2.33.0
+ provider registry.terraform.io/hashicorp/azurerm v3.43.0