@Mark Miller​ :

The error you are facing suggests that the group you are trying to manage can only be managed at the account level, which means you cannot manage it at the workspace level. This error typically occurs when you attempt to assign a group to an instance profile or role that is outside the scope of the workspace.

To resolve this issue, you can try the following:

1. Ensure that the group you are trying to manage is at the account level, and not at the workspace level.
2. Update the provider version to the latest version to ensure you have access to any new fixes or updates that may address this issue.
3. Try using the databricks_group resource instead of the databricks_group_instance_profile or databricks_group_role resources. This resource allows you to create and manage groups at the account level, and it can be used to grant access to instance profiles and roles.

Here's an example of how you could create a group and grant it access to an instance profile:

resource "databricks_instance_profile" "example" {
  name = "example-instance-profile"
}
 
resource "databricks_group" "example" {
  display_name = "example-group"
  provider = databricks.accounts
}
 
resource "databricks_group_instance_profile" "example" {
  group_id = databricks_group.example.id
  instance_profile_arn = databricks_instance_profile.example.arn
}

This creates a new instance profile and group at the account level, and then grants the group access to the instance profile.