[ISSUE] Issue with databricks_grant/databricks_grants resource

[wolfm89]

Configuration

# deactive marketplace access for all users
resource "databricks_grant" "metastore" {
  metastore  = data.databricks_current_metastore.this.id
  principal  = "account users"
  privileges = []
}

data "databricks_current_metastore" "this" {
}

Expected Behavior

I would like to deactivate marketplace access for all users as explained here: https://docs.databricks.com/en/marketplace/get-started-consumer.html#disable-marketplace-access

By default, only the USE MARKETPLACE ASSETS metastore privilege is assigned to all users.
By taking away all privileges, I expect the USE MARKETPLACE ASSETS metastore privilege to be removed.

Actual Behavior

An error is thrown:

Error: cannot read grant: got empty permissions list

The documentation actually mentions that the privileges list must not be empty:

(from https://registry.terraform.io/providers/databricks/databricks/latest/docs/resources/grant)

But how am I supposed to remove this single privilege then?

Steps to Reproduce

1. terraform apply

Terraform and provider versions

Terraform v1.9.8
on linux_amd64
+ provider registry.terraform.io/databricks/databricks v1.50.0

Is it a regression?

No

Debug Output

Not needed, the error is clear. This is where the error is thrown:

terraform-provider-databricks/catalog/resource_grant.go

Line 101 in 2ceab92

return nil, apierr.NotFound("got empty permissions list")

Important Factoids

No

Would you like to implement a fix?

No