Thank you @Vivian Wilfred​ 

You are so correct,

So regarding the console adding error, i added this iampass with my new role and i am able to add new instance profile via workspace console.

Regarding the TF ,I added the workspace provider and it is also works now. this is great.

I have one last question, I couldnt find the main iam policy attached to the cross account role on the databricks TF module ( same policy i added the iam pass with my new role. so i had to add those config manually. can you maybe tell me if i can control this policy via the TF?

And its called by the TF as: aws_iam_role_policy.this

but couldnt find it

Thanks!