Atlas-Ranger Tag based policy not working

[#1]

Hi, I am working with the ranger-atlas tag based policy, I think after I turned on the tag sync in Ranger, the tag in atlas is sync with ranger, coz I checked the ranger db and found the x_tag table has some records in it.

But I think in ranger, the tags are syncd but resource lookup not working for tags, coz when I search for some tag in tag-based policy, the tags in atlas cannot be searched.

the above pic shows the tags in atlas, while the below pic shows the tag sync in ranger, I am trying to search for the tag HBase, and it's not working

Furthermore, I added the tag based policy to hive, but the table under the HBase tag still cannot be accessed for the "admin" user

[#2]

@Qinglin Xia

Checking you created the Tag Service in Ranger. You need to define the Tag Service to enable tags flowing from Atlas to Ranger. And always worth checking all the components are online - Ranger Tag-sync, Kafka, etc.

[#3]

@Graham Martin

Thanks for your reply, I thihk I haved already define the Tag Service and add it to the hive policy

In the tag service I give user "admin" the permission to select all the tables/columns under the tag "Hive", and in Hive Policy I disable the user "admin" 's permission to select of all tables, so if the tag service works, "admin" should have the permission to visit all tables under the tag "Hive", but currently it is not working.

Am I missing something here?

[#4]

@Qinglin Xia

As @Graham Martin pointed out, please check if you have defined tag service for the Hive/Hbase. Unless tag service is defined, tagsync will not work.

Please follow below tutorial, which has detailed steps on the same.

https://hortonworks.com/tutorial/tag-based-policies-with-apache-ranger-and-apache-atlas/