Indexing and querying of principals associated with a file system

An apparatus, comprising:

• one or more memories storing processor-executable code;
• and
• one or more processors coupled with the one or more memories and individually or collectively operable to execute the code to cause the apparatus to:
• obtain, by a data management system, a snapshot of a file system, wherein the file system comprises a plurality of files and a plurality of permission sets, and wherein the plurality of permission sets indicate, for respective files of the plurality of files, one or more access approvals for one or more associated principals from among a plurality of principals associated with the file system;
• assign, by the data management system, a plurality of unique values to the plurality of permission sets, wherein a unique value of the plurality of unique values identifies a respective permission set from among the plurality of permission sets;
• store, by the data management system, a first mapping between the plurality of files and the plurality of unique values based at least in part on the plurality of permission sets that correspond to the plurality of files;
• store, by the data management system, a second mapping between the plurality of principals and the plurality of unique values based at least in part on an evaluation of the plurality of permission sets;
• and
• use, by the data management system, the first mapping and the second mapping to identify, for a principal included in the plurality of principals, a respective set of files from among the plurality of files to which the principal has access.

A non-transitory computer-readable medium storing code, the code comprising instructions executable by one or more processors to:

• obtain, by a data management system, a snapshot of a file system, wherein the file system comprises a plurality of files and a plurality of permission sets, and wherein the plurality of permission sets indicate, for respective files of the plurality of files, one or more access approvals for one or more associated principals from among a plurality of principals associated with the file system;
• assign, by the data management system, a plurality of unique values to the plurality of permission sets, wherein a unique value of the plurality of unique values identifies a respective permission set from among the plurality of permission sets;
• store, by the data management system, a first mapping between the plurality of files and the plurality of unique values based at least in part on the plurality of permission sets that correspond to the plurality of files;
• store, by the data management system, a second mapping between the plurality of principals and the plurality of unique values based at least in part on an evaluation of the plurality of permission sets;
• and
• use, by the data management system, the first mapping and the second mapping to identify, for a principal included in the plurality of principals, a respective set of files from among the plurality of files to which the principal has access.