Generate a new access token for each user and store it in Azure Key Vault.

Create a service principal in Azure Active Directory (AAD) and use it to generate resource tokens for accessing ADLS.

Use Azure Managed Identities to assign a managed identity to the Azure Databricks workspace and grant it access to ADLS.

Configure Azure Role-Based Access Control (RBAC) to assign roles to users and generate resource tokens based on their roles.