fix

common/resource.go

@@ -27,6 +27,12 @@ type Resource struct {
 	Timeouts           *schema.ResourceTimeout
 	DeprecationMessage string
 	Importer           *schema.ResourceImporter
+
+	// Set to true for account-level only resources, i.e. resources that can only be configured
+	// with an account-level provider. When false, the resource will include a workspace_id
+	// field that can be set when using an account-level provider to target a specific workspace
+	// in the account.
+	IsAccountLevelOnly bool
 }
 
 func nicerError(ctx context.Context, err error, action string) error {
@@ -77,6 +83,7 @@ func (r Resource) saferCustomizeDiff() schema.CustomizeDiffFunc {
 		err = r.CustomizeDiff(ctx, rd)
 		if err != nil {
 			err = nicerError(ctx, err, "customize diff for")
+			return
 		}
 		return
 	}
@@ -213,6 +220,9 @@ func (r Resource) ToResource() *schema.Resource {
 			},
 		}
 	}
+	if !r.IsAccountLevelOnly {
+		r.Schema = AddWorkspaceIdField(r.Schema)
+	}
 	return resource
 }
 

mws/data_mws_credentials.go

@@ -11,7 +11,7 @@ func DataSourceMwsCredentials() common.Resource {
 	type mwsCredentialsData struct {
 		Ids map[string]string `json:"ids,omitempty" tf:"computed"`
 	}
-	return common.DataResource(mwsCredentialsData{}, func(ctx context.Context, e any, c *common.DatabricksClient) error {
+	resource := common.DataResource(mwsCredentialsData{}, func(ctx context.Context, e any, c *common.DatabricksClient) error {
 		data := e.(*mwsCredentialsData)
 		if c.Config.AccountID == "" {
 			return fmt.Errorf("provider block is missing `account_id` property")
@@ -26,4 +26,6 @@ func DataSourceMwsCredentials() common.Resource {
 		}
 		return nil
 	})
+	resource.IsAccountLevelOnly = true
+	return resource
 }

mws/data_mws_workspaces.go

@@ -11,7 +11,7 @@ func DataSourceMwsWorkspaces() common.Resource {
 	type mwsWorkspacesData struct {
 		Ids map[string]int64 `json:"ids,omitempty" tf:"computed"`
 	}
-	return common.DataResource(mwsWorkspacesData{}, func(ctx context.Context, e any, c *common.DatabricksClient) error {
+	resource := common.DataResource(mwsWorkspacesData{}, func(ctx context.Context, e any, c *common.DatabricksClient) error {
 		data := e.(*mwsWorkspacesData)
 		if c.Config.AccountID == "" {
 			return fmt.Errorf("provider block is missing `account_id` property")
@@ -26,4 +26,6 @@ func DataSourceMwsWorkspaces() common.Resource {
 		}
 		return nil
 	})
+	resource.IsAccountLevelOnly = true
+	return resource
 }

mws/resource_mws_credentials.go

@@ -110,5 +110,6 @@ func ResourceMwsCredentials() common.Resource {
 			s["account_id"].Deprecated = "`account_id` should be set as part of the Databricks Config, not in the resource."
 			return s
 		}),
+		IsAccountLevelOnly: true,
 	}
 }

mws/resource_mws_customer_managed_keys.go

@@ -113,6 +113,7 @@ func ResourceMwsCustomerManagedKeys() common.Resource {
 				Upgrade: migrateResourceCustomerManagedKeyV0,
 			},
 		},
+		IsAccountLevelOnly: true,
 	}
 }
 

mws/resource_mws_log_delivery.go

@@ -119,5 +119,6 @@ func ResourceMwsLogDelivery() common.Resource {
 			}
 			return NewLogDeliveryAPI(ctx, c).Patch(accountID, configID, "DISABLED")
 		},
+		IsAccountLevelOnly: true,
 	}
 }

mws/resource_mws_networks.go

@@ -115,5 +115,6 @@ func ResourceMwsNetworks() common.Resource {
 			}
 			return NewNetworksAPI(ctx, c).Delete(accountID, networkID)
 		},
+		IsAccountLevelOnly: true,
 	}
 }

mws/resource_mws_permission_assignment.go

@@ -137,5 +137,6 @@ func ResourceMwsPermissionAssignment() common.Resource {
 			}
 			return NewPermissionAssignmentAPI(ctx, c).Remove(workspaceId, principalId)
 		},
+		IsAccountLevelOnly: true,
 	}
 }

mws/resource_mws_private_access_settings.go

@@ -74,5 +74,6 @@ func ResourceMwsPrivateAccessSettings() common.Resource {
 			}
 			return a.PrivateAccess.DeleteByPrivateAccessSettingsId(ctx, pasID)
 		},
+		IsAccountLevelOnly: true,
 	}
 }

mws/resource_mws_storage_configurations.go

@@ -113,5 +113,6 @@ func ResourceMwsStorageConfigurations() common.Resource {
 				Computed: true,
 			},
 		},
+		IsAccountLevelOnly: true,
 	}
 }

mws/resource_mws_vpc_endpoint.go

@@ -115,5 +115,6 @@ func ResourceMwsVpcEndpoint() common.Resource {
 			}
 			return NewVPCEndpointAPI(ctx, c).Delete(accountID, vpcEndpointID)
 		},
+		IsAccountLevelOnly: true,
 	}
 }

mws/resource_mws_workspaces.go

@@ -613,6 +613,7 @@ func ResourceMwsWorkspaces() common.Resource {
 			Read:   schema.DefaultTimeout(DefaultProvisionTimeout),
 			Update: schema.DefaultTimeout(DefaultProvisionTimeout),
 		},
+		IsAccountLevelOnly: true,
 	}
 }