- This happens because the "Read Type" permission is absent in the Ranger-Atlas plugin repository for the Atlas service.
- During the upgrade, a step to upgrade the ranger DB with the patches is skipped. Which is causing this permission to be not present after the CDP upgrade.
- The update handler needs to call the right script to install the DB patches for ranger which should automatically update the DB patches (during the upgrade process) and fix the issue.
- Issue is addressed and should be fixed in the upcoming releases of the the Cloudera Manager product line.
The workaround for this issue:
- Stop the Ranger Admin service.
1. Login in into CM UI -> Ranger -> Instances -> Select Ranger Admin.

2. From the drop down actions menu, select "Upgrade Ranger database and apply patches".

3. This step will manually apply the patches and will finish.
4. Once finished, you can restart the Ranger Admin service.
The atlas policy which is missing the permission (the id of policy can be different in your environment):

We need something similar to this:

