Support Questions

Find answers, ask questions, and share your expertise
Check out our newest addition to the community, the Cloudera Data Analytics (CDA) group hub.

What is the provenance access resource identifier for Ranger and Nifi 1.7?

The HDF 3.2 release notes mention that provenance and data access policies have been separated in nifi 1.7. The release notes do not mention what resource identifiers should be entered in ranger to give users access to provenance. Looking at the nifi release notes is similarly unhelpul.

my ranger nifi resource identifiers for data look like /data/process-groups/<uuid>

but /provenance/process-groups/<uuid> appears not to work

I would like to give people access to view any provenance events associated with components underneath a certain process group.

What ranger nifi resource identifier should I use?


I finally found the policy by looking at

It is


View solution in original post


I finally found the policy by looking at

It is


@David Miller

For reference, the resource descriptors for the different component level access policies can be found in the NiFi Admin Guide, specifically:

Take a Tour of the Community
Don't have an account?
Your experience may be limited. Sign in to explore more.