Problem statement

If we have Azure Blob Storage mount points, data is accessible for all clusters and warehouses in the workspace (at least for those people who have access to those warehouses/clusters). We need to migrate that to UC ACLs.

Related issues:

• [FEATURE]: Create UC External Location, Schema, and Table Grants based on workspace-wide Azure SPN mount points #94
• [FEATURE]: Create UC Storage Credential, Schema, and Table Grants based on AWS IAM role access #887
• [FEATURE]: Create UC Schema and Table Grants based on Legacy Table ACLs #340
• [EPIC] Multi-workspace installations #891
• [FEATURE]: Migrate AWS IAM Instance Profiles to UC Storage Credentials #862
• Migrate EXTERNAL tables from AWS Glue or other external HMS #337

Proposed Solution

• Get all permissions for all clusters and sql warehouses
• Create relevant permissions to External Locations that those mounts get converted into