Error when grant user permissions in HBase: HTTP 403 Error: Grantee user txw387 doesn't exist

[#1]

I want to grant user 'txw387' RWC permissions. There is a hadoop folder 'txw387' under /user.

However, this error occurs: 

ERROR: org.apache.hadoop.hbase.coprocessor.CoprocessorException: HTTP 403 Error: Grantee user txw387 doesn't exist
at org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor.preGrant(RangerAuthorizationCoprocessor.java:1277)
at org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor.preGrant(RangerAuthorizationCoprocessor.java:1110)
at org.apache.hadoop.hbase.master.MasterCoprocessorHost$164.call(MasterCoprocessorHost.java:1892)
at org.apache.hadoop.hbase.master.MasterCoprocessorHost$164.call(MasterCoprocessorHost.java:1889)
at org.apache.hadoop.hbase.coprocessor.CoprocessorHost$ObserverOperationWithoutResult.callObserver(CoprocessorHost.java:558)
at org.apache.hadoop.hbase.coprocessor.CoprocessorHost.execOperation(CoprocessorHost.java:631)
at org.apache.hadoop.hbase.master.MasterCoprocessorHost.preGrant(MasterCoprocessorHost.java:1889)
at org.apache.hadoop.hbase.master.MasterRpcServices.grant(MasterRpcServices.java:2721)
at org.apache.hadoop.hbase.shaded.protobuf.generated.MasterProtos$MasterService$2.callBlockingMethod(MasterProtos.java)
at org.apache.hadoop.hbase.ipc.RpcServer.call(RpcServer.java:387)
at org.apache.hadoop.hbase.ipc.CallRunner.run(CallRunner.java:139)
at org.apache.hadoop.hbase.ipc.RpcExecutor$Handler.run(RpcExecutor.java:369)
at org.apache.hadoop.hbase.ipc.RpcExecutor$Handler.run(RpcExecutor.java:349)

For usage try 'help "grant"'

How to solve this problem?

[#2]

@shubham_sharma @pajoshi @smdas Hi! Do you have any insights here? Thanks!

[#3]

Hi @MaraWang 

The error indicates you are using ranger to manage the permissions on hbase. Try to open the ranger WebUi and add the permissions for user under hbase policy.

Also, verify if the user 'txw387' exists in your cluster

Ref-

https://docs.cloudera.com/runtime/7.2.18/security-ranger-authorization/topics/security-ranger-resour...

[#4]

Hi @MaraWang it seems like the user itself is not present in ranger, you need to sync the user from your sync source for ranger, and after that, you need to prove RWX access on hdfs path "/user" under ranger -> cm_hdfs repo, either create a new policy for this or add into an existing one.