问如何用terraform建立统一目录访问连接器

EN

  provider "azuread" {
  client_id     = var.client_id
  client_secret = var.client_secret
  tenant_id     = var.tenant_id
}
provider "azurerm" {
  features {}
  client_id       = var.client_id
  client_secret   = var.client_secret
  subscription_id = var.subscription_id
  tenant_id       = var.tenant_id
}
provider "azapi" {
  client_id       = var.client_id
  tenant_id       = var.tenant_id
  subscription_id = var.subscription_id
  client_secret   = var.client_secret
}
resource "azurerm_resource_group" "this" {
  name     = "${local.prefix}-metaverse-migration-rg"
  location = var.region
  tags     = local.tags
}

resource "azapi_resource" "access_connector" {
type      = "Microsoft.Databricks/accessConnectors@2022-04-01-preview"
name      = "${local.prefix}-databricks-mi"
location  = azurerm_resource_group.this.location
parent_id = azurerm_resource_group.this.id
identity {
  type = "SystemAssigned"
}
body = jsonencode({
  properties = {}
})
}

Error: creating/updating "Resource: (ResourceId \"/subscriptions/mysubguid/resourceGroups/databricks-metaverse-migration-rg/providers/Microsoft.Databricks/accessConnectors/databricks-databricks-mi\" / Api Version \"2022-04-01-preview\")": PUT https://management.azure.com/subscriptions/mysubguid/resourceGroups/databricks-metaverse-migration-rg/providers/Microsoft.Databricks/accessConnectors/databricks-databricks-mi -------------------------------------------------------------------------------- RESPONSE 502: 502 Bad Gateway ERROR CODE: 403 -------------------------------------------------------------------------------- { "error": { "code": "403", "message": "User not authorized." } } -----------------------------------