alexjohn-ot

I likewise have to run the apply twice to pick up the `databricks_sql_access = true -> false` when setting `false` on the `users` group.