docs(databricks): restructure Permissions section into logical subsections

Author: charlesmyu

content/en/data_observability/jobs_monitoring/databricks/_index.md

@@ -460,16 +460,18 @@ DD_LOGS_CONFIG_PROCESSING_RULES=[{\"type\": \"exclude_at_match\",\"name\": \"dro
 ```
 
 ### Permissions
-Grant {{< ui >}}Workspace Admin{{< /ui >}} privileges to the user or service principal that connects to your Databricks workspace. This allows Datadog to manage init script installations and updates automatically, reducing the risk of misconfiguration.
+The user or service principal that connects to your Databricks workspace must have the following workspace entitlements enabled, in addition to the permissions described below:
 
-<div class="alert alert-info">Regardless of whether you grant <strong>Workspace Admin</strong> privileges or the granular permissions below, the user or service principal must have the following workspace entitlements enabled:
-<ul>
-<li>{{< ui >}}Databricks SQL access{{< /ui >}}</li>
-<li>{{< ui >}}Workspace access{{< /ui >}}</li>
-</ul>
-</div>
+- {{< ui >}}Databricks SQL access{{< /ui >}}
+- {{< ui >}}Workspace access{{< /ui >}}
+
+#### Workspace Admin privileges
 
-If you need more granular control, grant these minimal permissions to the following [workspace level objects][19] to still be able to monitor all jobs, clusters, and queries within a workspace:
+Grant {{< ui >}}Workspace Admin{{< /ui >}} privileges to the user or service principal. This allows Datadog to manage init script installations and updates automatically, reducing the risk of misconfiguration.
+
+#### Granular permissions
+
+If you need more granular control instead of Workspace Admin privileges, grant these minimal permissions to the following [workspace level objects][19] to still be able to monitor all jobs, clusters, and queries within a workspace:
 
 | Object                 | Permission                                                                                                                                                      |
 |--------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------|
@@ -479,6 +481,8 @@ If you need more granular control, grant these minimal permissions to the follow
 | Query                            | [CAN VIEW][23]
 | SQL warehouse                    | [CAN MONITOR][24]
 
+#### Cost data permissions
+
 Additionally, for Datadog to access your Databricks cost data in Data Observability: Jobs Monitoring or [Cloud Cost Management][26], the user or service principal used to query [system tables][27] must have the following permissions:
    - `CAN USE` permission on the SQL Warehouse.
    - Read access to the [system tables][27] within Unity Catalog. In Databricks, open the {{< ui >}}SQL Editor{{< /ui >}} and run the following commands, using the service principal's client ID (not its display name):