question Re: Should we remove Hive CLI roles & grants before enabling Ranger Authorization in Hive? in Archives of Support Questions (Read Only)

Should we remove Hive CLI roles & grants before enabling Ranger Authorization in Hive?

james_jones — Wed, 29 Jun 2016 23:54:31 GMT

We are enabling the Ranger authorization in Hive, but previously we created roles & grants in beeline. Should we remove manually created Hive grants and roles in beeline before switching from StdSqlAuth to Ranger authorization or will magic happen? The roles we created match our AD group names in the policies. (HDP 2.4)

Re: Should we remove Hive CLI roles & grants before enabling Ranger Authorization in Hive?

KuldeepK — Thu, 30 Jun 2016 00:05:21 GMT

@james.jones - I don't think so as you are modifying authorization property, it should not consider sql grants once you set authorization to Ranger.

Please also have a look at https://community.hortonworks.com/questions/28136/will-ranger-hive-plugin-override-existing-hive-sec.html

Re: Should we remove Hive CLI roles & grants before enabling Ranger Authorization in Hive?

james_jones — Thu, 30 Jun 2016 00:12:57 GMT

Awesome. Thanks. I wasn't sure if under the covers Ranger was just doing sql grants.