adding permissions to azure datalake gen1 - azure-data-lake

Question

I have an instance of Azure Datalake Storage Gen1 structured as :
folder structure
└── Tenants
├── Tenant-01
│   ├── Product-A
│   └── Product-B
└── Tenant-02
├── Product-A
└── Product-B
team structure
there is a one to one mapping between
Team-A owns Product-A
Team-B owns Product-B
permissions structure
Ideally I would want to give write permissions to Product-X for all tenants
Team-A write access under Tenants/**/Product-A/
Team-B write access under Tenants/**/Product-B/
and then potential read access like
Team-A read under Tenants/**/Product-B/
questions
how can we achieve this without hitting the 32 ACLs limit and with large number of Tenant-* without writing out each ACL specifically.
is this supported / how can this be migrated to Azure Data lake Storage Gen2

Answer 1

You can leverage role assignable groups in AAD to have groups created
for teamA and teamB and then assign required ACLS on those groups.
This way we no need to add ACLs for each user individually.
Please check below link to know how to create role assignable groups
in Azure Active Directory- Create Groups
You can opt to keep the POSIX access control lists (ACLs) along with
the data files while upgrading from Azure Data Lake Storage Gen1 to
Gen2 or copying data between ADLS Gen2. See Access control in Azure
Data Lake Storage Gen1 and Access control in Azure Data Lake Storage
Gen2 for additional information on access control.
When you use ADF to preserve ACLs from Data Lake Storage Gen1/Gen2 to
Gen2, the existing ACLs on sink Gen2's corresponding folder/files
will be overwritten.
Preserve ACLs from Data Lake Storage Gen1/Gen2 to Gen2 | Docs