According to the Sentry documentation " When Sentry is enabled, you must use Beeline to execute Hive queries. Hive CLI is not supported with Sentry and must be disabled". Is there any offcial way to disable Hive CLI.
Locking down hive CLI can be done with setting hadoop.proxyuser.hive.groups to a value which restricts hive access to specific groups only - and not to everyone ( * - asterisk for everyone).
Customer Operations Engineer