[FEATURE]: Identity Service Principal with CustomRole access on storage account databricks labs ucx save_azure_storage_accounts

[HariGS-DB]

Is there an existing issue for this?

• I have searched the existing issues

Problem statement

save_azure_storage_accounts cmd currently looks for SPN with Built in blob roles (Blob Owner, Blob, Contributor and Blog Reader), but doesn't cover Custom Roles with read access on the storage used by clusters. Extend the save_azure_storage_accounts to include custom roles as well

Related issues:

• [FEATURE]: Create access connector with managed identity #888
• Create Azure Storage account ACL inventory for credential passthrough #883
• [FEATURE]: Create uber-principal for performing external migration on Azure #881
• [FEATURE]: Migrate Azure Service Principals that access storage to Managed Identity based UC Storage Credentials #875

Proposed Solution

to be defined

Additional Context

No response