Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Is it possible to import existing HBase ACL into ranger ?

avatar
Master Mentor

HDP 2.3.2

Ambari 2.1

HBase has several hundred ACL and we just installed ranger . We "need" to find a way to extract existing ACL and import into ranger

1 ACCEPTED SOLUTION

avatar

You can also create Ranger policies by issuing grant/revoke commands via hbase shell.

Check slide 25 here from @sneethiraj:

http://www.slideshare.net/Hadoop_Summit/securing-hadoop-with-apache-ranger

So if customer can get a list of the grant commands they previously issued, they could possible re-run them and get the Ranger policies automatically created.

View solution in original post

4 REPLIES 4

avatar

Importing permissions into Ranger should be easy, however I dont think there is an easy way to export all the Hbase permissions. @Nick Dimiduk @nmaillard any idea how to export all user permissions?

avatar

You can also create Ranger policies by issuing grant/revoke commands via hbase shell.

Check slide 25 here from @sneethiraj:

http://www.slideshare.net/Hadoop_Summit/securing-hadoop-with-apache-ranger

So if customer can get a list of the grant commands they previously issued, they could possible re-run them and get the Ranger policies automatically created.

avatar
Master Mentor

@Neeraj Sabharwal the new tutorial on ranger walks you through exporting a policy and importing it using rest API.

avatar
Master Mentor