Support Questions
Find answers, ask questions, and share your expertise

Is it possible to import existing HBase ACL into ranger ?

HDP 2.3.2

Ambari 2.1

HBase has several hundred ACL and we just installed ranger . We "need" to find a way to extract existing ACL and import into ranger

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Is it possible to import existing HBase ACL into ranger ?

You can also create Ranger policies by issuing grant/revoke commands via hbase shell.

Check slide 25 here from @sneethiraj:

http://www.slideshare.net/Hadoop_Summit/securing-hadoop-with-apache-ranger

So if customer can get a list of the grant commands they previously issued, they could possible re-run them and get the Ranger policies automatically created.

View solution in original post

4 REPLIES 4

Re: Is it possible to import existing HBase ACL into ranger ?

Importing permissions into Ranger should be easy, however I dont think there is an easy way to export all the Hbase permissions. @Nick Dimiduk @nmaillard any idea how to export all user permissions?

Re: Is it possible to import existing HBase ACL into ranger ?

You can also create Ranger policies by issuing grant/revoke commands via hbase shell.

Check slide 25 here from @sneethiraj:

http://www.slideshare.net/Hadoop_Summit/securing-hadoop-with-apache-ranger

So if customer can get a list of the grant commands they previously issued, they could possible re-run them and get the Ranger policies automatically created.

View solution in original post

Re: Is it possible to import existing HBase ACL into ranger ?

Mentor

@Neeraj Sabharwal the new tutorial on ranger walks you through exporting a policy and importing it using rest API.

Re: Is it possible to import existing HBase ACL into ranger ?