Automating global category-based access control policy generation for distributed environment principals