question Re: hdfs privileges to other user-defined users in Archives of Support Questions (Read Only)

hdfs privileges to other user-defined users

bigdata_superno — Mon, 18 Jul 2016 21:56:55 GMT

Hi,

Would it be possible to provide hdfs privileges for users defined on the cluster? For example, my-env-hdfs is a user we have on our cluster. Can I grant hdfs user level privileges to this user? If possible, how to do it?

Likewise, how about other services like yarn, hive, ambari-qa etc?

Thanks

Re: hdfs privileges to other user-defined users

rbiswas1 — Mon, 18 Jul 2016 23:24:51 GMT

Hi @bigdata.neophyte

Here is a detailed answer to your question:

https://martin.atlassian.net/wiki/pages/viewpage.action?pageId=27885570

You can grant hdfs user level privileges which is a superuser group to other groups.

In short if you change this parameter (Under HDFS config):

dfs.permissions.supergroup = mygroup

And add any user to this mygroup it should have the superuser privileges.

Also refer this:

http://hadoop.apache.org/docs/r2.4.1/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html#Configuration_Parameters

But in my opinion superuser account should be very limited if not one.

Thanks

Re: hdfs privileges to other user-defined users

bigdata_superno — Tue, 19 Jul 2016 17:59:46 GMT

Thanks @rbiswas

Any idea how does it work for other services like hive, yarn, hbase etc?