You need an Azure Global Admin to do the first login and then create databricks admins so they can login to the account console. For security purposes, only someone with the Azure AD Global Administrator role has permissions to assign the first account admin role. Once another user has the account admin role, the Azure AD Global Administrator no longer needs to be involved. The new account admin can remove the Global Administrator from the Azure Databricks account and assign other users the account admin role.