We have a team of multiple people, and they need to do Databricks Terraform config from the CLI. We'd like to do this without having all people be account admins in Databricks.

What is the best way to do that?

Right now, we have Terraform set up so that you must be admin of Databricks account to run Terraform. The account provider is set up with user/password:

provider "databricks" {

 alias     = "mws"

 host      = "https://accounts.cloud.databricks.com"

 account_id = var.databricks_account_id

 username  = var.databricks_account_username

 password  = var.databricks_account_password

}

Workspace providers are set up with workspace tokens, and you don't have to be workspace admin (just need a workspace admin token):

provider "databricks" {

 alias = "dev_workspace"

 host = module.dev_workspace.workspace_url

 token = module.dev_workspace.databricks_token

}

Would it be possible to configure the Databricks account Terraform provider, say, with some sort of token with admin privileges, or some sort of Service Principal with admin privileges - so we don't need to be admin user to run Terraform?