question Re: How to deny admin user/group from dropping hive tables from Hue? in Support Questions

How to deny admin user/group from dropping hive tables from Hue?

Shivakuk — Tue, 21 Apr 2026 06:42:50 GMT

Hi community,

From Hue security browser, I have a RBAC role (admin), which was given all permission on all databases.
I have this Database A which consists of table1,2,3
I want to deny this admin role from dropping Database A -> Table1 and Table2.

Can you show me how this can be done on sentry?

Thanks!!

Re: How to deny admin user/group from dropping hive tables from Hue?

jAnshula — Tue, 20 Feb 2024 17:20:46 GMT

Hi @Shivakuk

Please refer below doc, you can use the Revoke statements in sentry to restrict the access on a database

https://docs.cloudera.com/documentation/enterprise/6/latest/topics/sg_hive_sql.html#revoke_privilege_statement

Let us know if this helps

Re: How to deny admin user/group from dropping hive tables from Hue?

Shivakuk — Wed, 21 Feb 2024 03:44:52 GMT

The document from Cloudera does not specifically mention on how to revoke drop privilege.

Please advise.

Re: How to deny admin user/group from dropping hive tables from Hue?

jAnshula — Thu, 22 Feb 2024 10:53:05 GMT

Hi @Shivakuk As I test Sentry does not support DROP and DELETE privilege.

However if you want to remove the DROP access from Admin user, then you have first remove ALL privileges and just provide SELECT and INSERT privileges to the user

NOTE: The DELETE, UPDATE, and UPSERT operations require the ALL privilege on the DB/ Table/ Column.