Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

How to secure hive tables using ranger?

avatar
Expert Contributor
 
1 ACCEPTED SOLUTION

avatar

Hive tables should be secured with the following steps:

  1. Disable "doAs" for Hive. This will make everything run as the hive user on the backend. This is important because then you can control access to the HDFS files to just the hive user and this will allow you to more effectively use column level security.
  2. Create a Ranger HDFS policy to give the hive user access to the HDFS files that underly the hive table.
  3. Create a Ranger Hive policy to grant users accesses to the tables/columns.

This allows the most granular security control of the Hive tables.

View solution in original post

2 REPLIES 2

avatar

Hive tables should be secured with the following steps:

  1. Disable "doAs" for Hive. This will make everything run as the hive user on the backend. This is important because then you can control access to the HDFS files to just the hive user and this will allow you to more effectively use column level security.
  2. Create a Ranger HDFS policy to give the hive user access to the HDFS files that underly the hive table.
  3. Create a Ranger Hive policy to grant users accesses to the tables/columns.

This allows the most granular security control of the Hive tables.

avatar
Expert Contributor