ucx icon indicating copy to clipboard operation
ucx copied to clipboard

[FEATURE]: Add `reconfigure-group-migration` command

Open Ben-Roche-work opened this issue 2 years ago • 3 comments

Is there an existing issue for this?

  • [X] I have searched the existing issues

Problem statement

When running databricks labs install ucx for the first time, a user is prompted to enter the workspace groups to migrate. If no groups are entered, it is challenging to retrospectively choose which workspace groups to migrate. This is because:

  • It is not clear which parameter(s) should be manually added to the config.yml file to define the comma-separated list of groups to migrate
  • There is a lack of examples for the config.yml template in ucx/docs/*

Additionally, this feature is useful as admins may decide to re-prioritize workspace groups migration based on the result of running the [UCX] assessment workflow; certain groups may have permissions on workspace objects that are more difficult to upgrade than others, resulting in a re-prioritization of groups due to perceived risk (e.g., certain group has very long list of tacls on legacy assets).

Proposed Solution

Create databricks labs ucx workspace-groups-to-migrate command. It should:

  • Show which workspace groups are currently listed to be migrated
  • Ask the user if they want to update the current list
  • Prompt the user for a comma separated list of workspace group names.
  • Update the config.yml file in the workspace to reflect the listed group names.

Additional Context

When running databricks labs ucx validate-groups-membership or the [UCX] migrate-groups workflow, I am getting 0 WorkspaceGroup's returned. I believe this to be due to missing parameters in the config.yml file created during install (databricks labs install ucx). I believe this is because a comma-separated list of workspace groups was not specified during install, and therefore the relevant parameter was omitted from the workspace config.yml file.

When running databricks labs groups list with the same PAT token, I am getting 2 (all) workspace groups returned, so this is specifically an issue with ucx and not auth.

Ben-Roche-work avatar Feb 05 '24 11:02 Ben-Roche-work

Thank you for the feature request! Currently, the team operates in a limited capacity, carefully prioritizing, and we cannot provide a timeline to implement this feature. Please make a Pull Request if you'd like to see this feature sooner, and we'll guide you through the journey.

nfx avatar Feb 05 '24 18:02 nfx

@Ben-Roche-work why can't all groups be migrated at once?

nfx avatar Mar 05 '24 12:03 nfx

@Ben-Roche-work Could this be covered with improved documentation on the configuration file?

JCZuurmond avatar Jul 17 '24 13:07 JCZuurmond