Is it possible to import existing HBase ACL into ranger ?

[#1]

HDP 2.3.2

Ambari 2.1

HBase has several hundred ACL and we just installed ranger . We "need" to find a way to extract existing ACL and import into ranger

[#2]

Importing permissions into Ranger should be easy, however I dont think there is an easy way to export all the Hbase permissions. @Nick Dimiduk @nmaillard any idea how to export all user permissions?

[#3 · Accepted solution]

You can also create Ranger policies by issuing grant/revoke commands via hbase shell.

Check slide 25 here from @sneethiraj:

http://www.slideshare.net/Hadoop_Summit/securing-hadoop-with-apache-ranger

So if customer can get a list of the grant commands they previously issued, they could possible re-run them and get the Ranger policies automatically created.

[#4]

@Neeraj Sabharwal the new tutorial on ranger walks you through exporting a policy and importing it using rest API.

[#5]

@bdurai @sneethiraj