Log message as error when legacy permissions API is enabled/disabled depending on the workflow ran (#3443)

## Changes
Log message as error when legacy permissions API is enabled/disabled
depending on the workflow ranso that the workflow fails, signaling to
the user to take action

### Linked issues

Resolves #3388

### Functionality

- [x] modified existing workflow: `migrate-groups-legacy`,
`migrate-groups`, `validate-groups-permissions` and
`remove-workspace-local-backup-groups`

Author: JCZuurmond

src/databricks/labs/ucx/workspace_access/workflows.py

@@ -18,15 +18,15 @@ def verify_metastore_attached(self, ctx: RuntimeContext):
         Account level groups are only available when a metastore is attached to the workspace.
         """
         if not ctx.config.use_legacy_permission_migration:
-            logger.info("Use `migrate-groups` job, or set `use_legacy_permission_migration: true` in config.yml.")
+            logger.error("Use `migrate-groups` job, or set `use_legacy_permission_migration: true` in config.yml.")
             return
         ctx.verify_has_metastore.verify_metastore()
 
     @job_task(depends_on=[Assessment.crawl_groups, verify_metastore_attached])
     def rename_workspace_local_groups(self, ctx: RuntimeContext):
         """Renames workspace local groups by adding `db-temp-` prefix."""
         if not ctx.config.use_legacy_permission_migration:
-            logger.info("Use `migrate-groups` job, or set `use_legacy_permission_migration: true` in config.yml.")
+            logger.error("Use `migrate-groups` job, or set `use_legacy_permission_migration: true` in config.yml.")
             return
         ctx.group_manager.rename_groups()
 
@@ -35,7 +35,7 @@ def reflect_account_groups_on_workspace(self, ctx: RuntimeContext):
         """Adds matching account groups to this workspace. The matching account level group(s) must preexist(s) for this
         step to be successful. This process does not create the account level group(s)."""
         if not ctx.config.use_legacy_permission_migration:
-            logger.info("Use `migrate-groups` job, or set `use_legacy_permission_migration: true` in config.yml.")
+            logger.error("Use `migrate-groups` job, or set `use_legacy_permission_migration: true` in config.yml.")
             return
         ctx.group_manager.reflect_account_groups_on_workspace()
 
@@ -56,7 +56,7 @@ def apply_permissions_to_account_groups(self, ctx: RuntimeContext):
 
         See [interactive tutorial here](https://app.getreprise.com/launch/myM3VNn/)."""
         if not ctx.config.use_legacy_permission_migration:
-            logger.info("Use `migrate-groups` job, or set `use_legacy_permission_migration: true` in config.yml.")
+            logger.error("Use `migrate-groups` job, or set `use_legacy_permission_migration: true` in config.yml.")
             return
         migration_state = ctx.group_manager.get_migration_state()
         if len(migration_state.groups) == 0:
@@ -68,7 +68,7 @@ def apply_permissions_to_account_groups(self, ctx: RuntimeContext):
     def validate_groups_permissions(self, ctx: RuntimeContext):
         """Validate that all the crawled permissions are applied correctly to the destination groups."""
         if not ctx.config.use_legacy_permission_migration:
-            logger.info("Use `migrate-groups` job, or set `use_legacy_permission_migration: true` in config.yml.")
+            logger.error("Use `migrate-groups` job, or set `use_legacy_permission_migration: true` in config.yml.")
             return
         if not ctx.permission_manager.verify_group_permissions():
             raise ValueError(
@@ -89,15 +89,15 @@ def verify_metastore_attached(self, ctx: RuntimeContext):
         Account level groups are only available when a metastore is attached to the workspace.
         """
         if ctx.config.use_legacy_permission_migration:
-            logger.info("Remove `use_legacy_permission_migration: true` from config.yml to run this workflow.")
+            logger.error("Remove `use_legacy_permission_migration: true` from config.yml to run this workflow.")
             return
         ctx.verify_has_metastore.verify_metastore()
 
     @job_task(depends_on=[Assessment.crawl_groups, verify_metastore_attached])
     def rename_workspace_local_groups(self, ctx: RuntimeContext):
         """Renames workspace local groups by adding `db-temp-` prefix."""
         if ctx.config.use_legacy_permission_migration:
-            logger.info("Remove `use_legacy_permission_migration: true` from config.yml to run this workflow.")
+            logger.error("Remove `use_legacy_permission_migration: true` from config.yml to run this workflow.")
             return
         ctx.group_manager.rename_groups()
 
@@ -106,7 +106,7 @@ def reflect_account_groups_on_workspace(self, ctx: RuntimeContext):
         """Adds matching account groups to this workspace. The matching account level group(s) must preexist(s) for this
         step to be successful. This process does not create the account level group(s)."""
         if ctx.config.use_legacy_permission_migration:
-            logger.info("Remove `use_legacy_permission_migration: true` from config.yml to run this workflow.")
+            logger.error("Remove `use_legacy_permission_migration: true` from config.yml to run this workflow.")
             return
         ctx.group_manager.reflect_account_groups_on_workspace()
 
@@ -130,7 +130,7 @@ def apply_permissions(self, ctx: RuntimeContext):
 
         It covers local workspace-local permissions for all entities."""
         if ctx.config.use_legacy_permission_migration:
-            logger.info("Remove `use_legacy_permission_migration: true` from config.yml to run this workflow.")
+            logger.error("Remove `use_legacy_permission_migration: true` from config.yml to run this workflow.")
             return
         migration_state = ctx.group_manager.get_migration_state()
         if len(migration_state.groups) == 0:
@@ -150,7 +150,7 @@ def __init__(self):
     def validate_groups_permissions(self, ctx: RuntimeContext):
         """Validate that all the crawled permissions are applied correctly to the destination groups."""
         if not ctx.config.use_legacy_permission_migration:
-            logger.info("Use `migrate-groups` job, or set `use_legacy_permission_migration: true` in config.yml.")
+            logger.error("Use `migrate-groups` job, or set `use_legacy_permission_migration: true` in config.yml.")
             return
         if not ctx.permission_manager.verify_group_permissions():
             raise ValueError(