Setting Up Azure Access for UCX Table Migration | Part 6

hey everyone welcome to this next video on the ucx series and the second part of the table migration flow I'm Andrea and in this video we'll be covering the next commands required to be executed before proceeding with the table migration these commands are going to be focused on authentication and access so we need to deploy and configure a lot of things on the cloud small disclaimer here this video will be focused specifically on the aser Cloud functionality and usage of commands will vary depending on the cloud that you're using so make sure to follow the correct guide let's get started first it's useful to understand where we're at that is what we have done so far what we are going to do in this step and what's missing for the next video as you can see here we have already completed the table mapping so ucx knows what our desired design is so now we need to execute the four commands in the red box let's understand what each of these is going to do our first stop is the principal prefix access command to execute this and the following terminal commands will need the appropriate authentication in this case the Asher CLI with the proper credentials this command will identify all of the storage accounts used on the tables of the workspace for later grants once we have executed this command we can move on to the next one the migrate credentials command this like the rest will work differently on each Cloud for ashure it will create a new access connector for each of the storage accounts detected previously this is optional but recommended this will also migrate any aure service principles with storage blob data contributor data reader data owner roles on any ADLs Gen 2 locations being used on data braks to Unity catalog storage credentials after this process is completed those respective storage credentials will be created on the DAT site and available for use moving on to the migrate locations command this one will take the output of the assessment and the migrate credentials command to create all of the required external locations pointing to the Right Storage accounts and storage credentials used and created in the previous step you can validate the external locations that will be created by using the validate external locations command the final step is to execute the create Uber principle command this will create an asro service principle with read only access to the detected storage accounts the migration workflows will use this service principle to ensure ucx has access to the data now that we understand the process and what it does let's start executing the commands first let's run the principle prefix command again I'm using custom authentication profile that has access to my workspace for this set of commands we also have to specify the subscription ID or IDs where our storage accounts are located I executed the command so now it's using my Asher CLI authentication making sure that I have access and then executing the command commands in this case once it's finished executing we can move on to the next one the migrate credentials command so let's give this a second again this will take some time depending on your configuration of the workspace how many assets you have and how many objects it has to go through so now we can move on to the next one migrate credentials command again I'm specifying the subscription IDs and my authentication profile one once this command is completed we'll be able to see a new access connector or multiple in a resource Group as well as the storage credential on the DAT R site first we need to confirm if we need if we want to create an access connector for each storage account this is what I mentioned that it's optional but recommended so let's see yes this is going to proceed with that step creating those access connectors in my resarch group in this case just one and then it's going to ask me if I want to migrate my service principles as well in this case I don't have any so it will say that it found zero so I can just proceed saying that I don't want to M anything and then the execution is complete so now if we check we can see on the workspace we have a new storage credential and this storage credential is pointing to a new access connector so if we go to Asher and refresh we'll be able to see that storage access connector created on the AER side with a tag that says create by ucx great now we have the storage credentials so we need to create the external locations let's run the appropriate command in this case we have to execute the migrate locations using the correct subscription again and the profile for authentication of the workspace for this one we can also check the workspace once execution is finished and we should be able to see a new external location pointing to this storage account that I'm using for the demo and using the storage credential that was created in the previous step so let's check it out let's go back and we'll see now that we have a new exter location that's pointing to my container and storage account and that it's using my storage credential that I created in the previous step finally the last command that we will use in this video will be the create duber principle so let's run that for this command we can also check that the correct changes were performed on the Asher side as I said and explain on the presentation this will create a new service principle on the tenant so if we go to the tenant after this is created right now it's asking me for a name I'll just leave it as default after this is created we can see the confirmation so we can go to the tenant refresh and now we have that service principle again this service principle will have access to my storage account or storage accounts and it's the one that's going to be used for the migration of the tables in the migration workflows in the next video we'll finish the table migration flow to complete a migration from hive metas store into Unity catalog thank you