question How to create Ranger policy for Atlas in sandbox cluster? in Support Questions

How to create Ranger policy for Atlas in sandbox cluster?

RobertCare — Mon, 09 Dec 2019 13:56:10 GMT

I'm trying to create a Ranger policy for Atlas in a kerberized cluster using HDP sandbox HDP-3.0.1.0 (3.0.1.0-187) but receive a 401 (unable to create policy) notification.

I'm trying to figure out which user to use following the "Learning the Ropes of the HDP Sandbox" but I can't make sense of it.

- "raj_ops", "maria_dev", "amy_ds" give the error stated above

- "holger_gov" cannot login to Ranger UI

- "admin" (following the "Admin password reset" procedure) can login to Ambari but not to Ranger UI

Any guidance would be greatly appreciated.

Re: How to create Ranger policy for Atlas in sandbox cluster?

RobertCare — Mon, 09 Dec 2019 14:46:02 GMT

Apparently there is a esotheric bit of information on the "Learning the ropes of the HDP sandbox" page which is not meant to be found by the uninitiated.

This link actually points to https://www.cloudera.com/tutorials/tag-based-policies-with-apache-ranger-and-apache-atlas/2.html#create-a-ranger-policy-to-limit-access-of-hive-data where there is the concept of yet another set of admin credentials but specifically for Ranger:

"admin" / "hortonworks1"

This user is allowed to create policies.