https://community.cloudera.com/t5/Support-Questions/Phoenix-security-and-initial-system-table-creation/m-p/155369#M117808 <P><A rel="user" href="https://community.cloudera.com/users/223/jelser.html" nodeid="223">@Josh Elser</A> Can you help me out. Not sure what it means insufficient permissions. are you referring to the SYSTEM namespace ? </P><P>I am trying to launch a session using pheonix-sqlline with a under privileged user who has read permission on the ALL the namespaces and tables typically added the public group to the default policy in Ranger.</P><P><STRONG>2. When a user makes the first connection to Phoenix (instantiates the JDBC driver) it will check and try to create the SYSTEM tables if they don't already exist. For all but the first connection, this will be a no-op. If you have permissions put in place, you will want to launch sqlline (or some application using Phoenix) which has the permission to create these SYSTEM tables. Then, before having unprivileged users access phoenix, make sure they have read permission on the system tables.</STRONG></P><P><STRONG><BR /></STRONG></P><P>as per above my understanding is any user needs to have full permissions on the system tables while connecting to sqlline for the first time and then just granting read access on the system tables should help him re-establish the session.</P><P>Also can you please point me to document that can provide information around restricting access via Ranger for Phoenix.</P> Wed, 06 Sep 2017 19:33:02 GMT sriramdboss 2017-09-06T19:33:02Z