Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

hdfs privileges to other user-defined users

Solved Go to solution
Highlighted

hdfs privileges to other user-defined users

New Contributor

Hi,

Would it be possible to provide hdfs privileges for users defined on the cluster? For example, my-env-hdfs is a user we have on our cluster. Can I grant hdfs user level privileges to this user? If possible, how to do it?

Likewise, how about other services like yarn, hive, ambari-qa etc?

Thanks

1 ACCEPTED SOLUTION

Accepted Solutions

Re: hdfs privileges to other user-defined users

Hi @bigdata.neophyte

Here is a detailed answer to your question:

https://martin.atlassian.net/wiki/pages/viewpage.action?pageId=27885570

You can grant hdfs user level privileges which is a superuser group to other groups.

In short if you change this parameter (Under HDFS config):

dfs.permissions.supergroup = mygroup

And add any user to this mygroup it should have the superuser privileges.

Also refer this:

http://hadoop.apache.org/docs/r2.4.1/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html#Confi...

But in my opinion superuser account should be very limited if not one.

Thanks

2 REPLIES 2

Re: hdfs privileges to other user-defined users

Hi @bigdata.neophyte

Here is a detailed answer to your question:

https://martin.atlassian.net/wiki/pages/viewpage.action?pageId=27885570

You can grant hdfs user level privileges which is a superuser group to other groups.

In short if you change this parameter (Under HDFS config):

dfs.permissions.supergroup = mygroup

And add any user to this mygroup it should have the superuser privileges.

Also refer this:

http://hadoop.apache.org/docs/r2.4.1/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html#Confi...

But in my opinion superuser account should be very limited if not one.

Thanks

Re: hdfs privileges to other user-defined users

New Contributor

Thanks @rbiswas

Any idea how does it work for other services like hive, yarn, hbase etc?