AAD will not work without using databricks configure --token option.
References:
https://docs.databricks.com/dev-tools/cli/index.html
https://learn.microsoft.com/en-us/azure/databricks/dev-tools/cli/
Need to update the documentation and example to add this command. Otherwise there is a less than helpful response of a 403 error that doesn't point at where the problem really is. We spent more time than I care to admin troubleshooting the access side of the house before realizing it was a missed configuration step.