Created on 09-25-2019 02:52 AM - last edited on 09-26-2019 11:28 AM by lwang
Hi Team,
I am using cloudera manager.In this i am trying to give an access for particular services to the new users. Like i am a new user and i needed only spark and pig so once i added in cloudera as a user so i can read and write for these two services only not all the services.
For that i have tried to sentry option but it is not full fill my requirement. Can you give me or provide me any solution for this.
Thanks,
Vikas,.
Created 09-25-2019 10:44 AM
Hi @vikaskanchan ,
I believe you are asking a question about authorization for specific services access. I am not quite sure if there is a specific way to authorize users just using Spark. What we do have are permissions, ACLs, Sentry for the underlying data that services such as Spark or Pig would need. For example, HDFS and Hive can be configured using Sentry and Spark Jobs typically access HDFS and Hive data. More details about authorization can be found here:
https://www.cloudera.com/documentation/enterprise/latest/topics/sg_authorization.html
Cloudera Manager only provides Users Roles authorization which does not seem to fit your need:
https://www.cloudera.com/documentation/enterprise/latest/topics/cm_sg_user_roles.html
Thanks,
Li
Li Wang, Technical Solution Manager
Created 09-25-2019 10:44 AM
Hi @vikaskanchan ,
I believe you are asking a question about authorization for specific services access. I am not quite sure if there is a specific way to authorize users just using Spark. What we do have are permissions, ACLs, Sentry for the underlying data that services such as Spark or Pig would need. For example, HDFS and Hive can be configured using Sentry and Spark Jobs typically access HDFS and Hive data. More details about authorization can be found here:
https://www.cloudera.com/documentation/enterprise/latest/topics/sg_authorization.html
Cloudera Manager only provides Users Roles authorization which does not seem to fit your need:
https://www.cloudera.com/documentation/enterprise/latest/topics/cm_sg_user_roles.html
Thanks,
Li
Li Wang, Technical Solution Manager
Created 09-26-2019 12:17 AM
Thanks @lwang for the input we will try with this also.
Created 09-26-2019 02:50 AM
Hi @lwang ,
I have checked link so i found this is only for hive , impala and Hue and it is providing a database level access but if we want to give access for spark and other service so how we can do .
Please help me to find out.
Thanks,
Vikas.
Created 09-27-2019 10:46 AM
Hi @vikaskanchan ,
I have asked internally and unfortunately there is no spark level permission as far as I know.
Thanks,
Li
Li Wang, Technical Solution Manager
Created 09-27-2019 11:09 PM
Hi @lwang ,
Thanks for the input So we can do only for hive ,impala and hue only .
Please let me know if any new update is coming where you are going involved this concern.
Thanks,
Vikas.