Archives of Support Questions (Read Only)

This is an archived board for historical reference. Information and links may no longer be available or relevant
Announcements
This board is archived and read-only for historical reference. To ask a new question, please post a new topic on the appropriate active board.

hdfs privileges to other user-defined users

avatar
Rising Star

Hi,

Would it be possible to provide hdfs privileges for users defined on the cluster? For example, my-env-hdfs is a user we have on our cluster. Can I grant hdfs user level privileges to this user? If possible, how to do it?

Likewise, how about other services like yarn, hive, ambari-qa etc?

Thanks

1 ACCEPTED SOLUTION

avatar

Hi @bigdata.neophyte

Here is a detailed answer to your question:

https://martin.atlassian.net/wiki/pages/viewpage.action?pageId=27885570

You can grant hdfs user level privileges which is a superuser group to other groups.

In short if you change this parameter (Under HDFS config):

dfs.permissions.supergroup = mygroup

And add any user to this mygroup it should have the superuser privileges.

Also refer this:

http://hadoop.apache.org/docs/r2.4.1/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html#Confi...

But in my opinion superuser account should be very limited if not one.

Thanks

View solution in original post

2 REPLIES 2

avatar

Hi @bigdata.neophyte

Here is a detailed answer to your question:

https://martin.atlassian.net/wiki/pages/viewpage.action?pageId=27885570

You can grant hdfs user level privileges which is a superuser group to other groups.

In short if you change this parameter (Under HDFS config):

dfs.permissions.supergroup = mygroup

And add any user to this mygroup it should have the superuser privileges.

Also refer this:

http://hadoop.apache.org/docs/r2.4.1/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html#Confi...

But in my opinion superuser account should be very limited if not one.

Thanks

avatar
Rising Star

Thanks @rbiswas

Any idea how does it work for other services like hive, yarn, hbase etc?