[FEATURE]: Create Account group equivalent for the workspace admin group

[HariGS-DB]

Is there an existing issue for this?

• I have searched the existing issues

Problem statement

Currently when we migrate workspace local group to account level, there isn't an equivalent group for workspace admins. Workspace admin will have access to Table ACL table and Underlying storage access through interactive clusters, There permission is lost when moving to UC.

Related Issue:

• [FEATURE]: Create External Location, Catalog, Schema ACL for Principals based on Interactive cluster permission using instance profiles #1193
• [FEATURE]: Create External Location ACL for Principals based on Interactive cluster permission using SPN #1192
• [FEATURE]: Create UC Storage Credential, Schema, and Table Grants based on Azure SPN access #907
• [FEATURE]: Create UC Storage Credential, Schema, and Table Grants based on AWS IAM role access #887

Proposed Solution

• rely on the output of "sync-workspace-info" to retrieve a current workspace group name
• account group should be f'{workapace_name}_admins'
• Create a workspace admin group equivalent in the account level.
• grant access to that group on the interactive clusters underlying data in catalog, schema, tables and external locations

Additional Context

No response

[nfx]

done:
https://github.com/databrickslabs/ucx?tab=readme-ov-file#create-account-groups-command