Created on 03-09-2017 04:59 PM - edited 08-17-2019 01:53 PM
For this article let’s take the supposition that we have a MDM Software handling the enterprise organization.
When we add/change an item in a MDM, it goes throw a workflow (validation, dedup, etc…).
For synchronizing in real-time to Ranger “Users and Policies Management” the last action on the workflow must be publishing to a broker the information, that can be a JMS based broker(AMQ, RabbitMQ etc ..) or Kafka.
Putting the message into a broker gives you the safety of never losing the event.We use HDF to consume, built the payload and call Ranger API.
List of hidden Ranger useful API's.
To invoke the API's
curl -u admin:admin -v -i -s -X POST -H "Accept: application/json" -H "Content-Type: application/json" http://<IP>:6080/service/xusers/secure/users -d @<FILE_PATH>
curl -u admin:admin -v -i -s -X GET http://<IP>:6080/service/xusers/users
curl -u admin:admin -v -i -s -X DELETE http://xxx:6080/service/xusers/secure/users/$ID_USER
Create a user
http://<IP>:6080/service/xusers/secure/users
Update a user
http://<IP>:6080/service/xusers/secure/users/{id}
Delete a user
http://<IP>:6080/service/xusers/users/userName/{userName}
Create a group
http://<IP>:6080/service/xusers/secure/groups
Update a group
http://<IP>:6080/service/xusers/secure/groups/{id}
Delete a group
http://<IP>:6080/service/xusers/groups/groupName/{groupName}
For Policies API there is a good documentation directly on the Apache Ranger documentation
https://cwiki.apache.org/confluence/display/RANGER/REST+APIs+for+Service+Definition%2C+Service+and+P...
Others useful API's
Get a particular group by name
http://<IP>:6080/service/xusers/groups?name=ha
Get particular group details
http://<IP>:6080/service/xusers/groups/{id}
Get a user's Count
http://<IP>:6080/service/xusers/users/count
Get particular group details
http://<IP>:6080/service/xusers/groups/{id}
Created on 07-05-2021 04:56 AM
Hi,
I have a requirement like, i need to create policy with two groups .one group with "ALL" permissions to some "x" user and 2nd group with "select" permission to "y" user.
i have created policy through REST APi with one group but with "all" permissions but how to mention 2nd group with "select" permission in same create policy command.
Thanks in advance!
Srini Podili
Created on 07-05-2021 09:47 AM
@srinivasp as this is an older post, you would have a better chance of receiving a resolution by starting a new thread. This will also be an opportunity to provide details specific to your environment that could aid others in assisting you with a more accurate answer to your question. You can link this thread as a reference in your new post.
Regards,
Vidya
User | Count |
---|---|
758 | |
379 | |
316 | |
309 | |
270 |