Automate Unity Catalog Upgrade with UCX Part 4 - Group Migration

Key Takeaways

hello everyone welcome to the next video on the ucx series on this video we will focus on group migration group migration is the next step after running the assessment workflow so what does group migration involve here you can see a comparison of the command line commands and the workflow commands generally you would prefer to run the workflows and we would recommend using the workflows for this however looking at the command line commands will give you us a better idea of what this steps involve you can see that in the workflows commands we don't have a create account groups task this is because this can only be done either using the command line or using other methods such as integrating with scheme once the account groups are created then you can move on to the next steps if you're using the workflows this would mean running the migrate groups workflow we recommend using the normal workflow instead of the experimental one it will first rename your workspace local groups and it will use the prefix that we set during the installation in this case it was DB temp or this renaming it will then reflect the account groups on the workplace this means it will assign the new account groups to the workspace it will finally apply the permissions to the account groups these permissions are the workpace level permissions of your clusters jobs ml models experiments all of those permissions will be applied in the end there's also step for validating group permissions you can also run that validate group permissions independently as a workflow so let's say after a couple of days you want to check that the groups permissions are still consistent you can run that and there's also a final step called remove workspace local backup groups which once you feel comfortable with the group migration you can run that to delete your renamed workspace old groups with that said let's see how this looks in the UI as you remember from last time I had this DB test group created at account lab but on my workspace I had two groups these two groups had members within them so to do this correctly from scratch I'm just going to delete this group from the account level and use the create account groups command to create them correctly okay so let's go to the terminal to run this so in my terminal I'm going to run data R slabs ucx create account groups in this case I'm using my profile to authenticate and I'm also passing the workspace ID which is the workspace I want to migrate so this is this workspace here so let's run this once this runs you can see it has created the test group one and test group two in the account so if I go to the account and I refresh here you can see I have my two groups with their correct memberships now that the create account groups command has been run we can go to run our migrate groups workflow so for that we go to workflows we search for our ucx workflows and we open the migrate groups work I'm going to click run now and this will run the migration you can see here the tasks in more detail you will verify the meta stor is attached rename workspace logo groups reflect account groups on workspace apply permissions to account and validate valid group permissions so now when it finish s running what you will see is you will be able to go to your [Music] settings identi and access groups and you will see that you have the old groups being renamed to DB temp and you have the new groups here created and the permissions have been assigned once you use this and you found that everything works correctly what you can do is you can go back to workflows and run the remove workpace local backup groups to delete the DB temp groups so you can click run now for that one and it will clean that up for you so now you can see this has successfully run and if I go back to the groups you can see the old groups have been successfully removed and we have only the remaining account groups thank you very much