Support Questions

Find answers, ask questions, and share your expertise

how to know which group is linked to a sentry role by command line

hello cloudera community,

 

how can we find out which group is tied to a sentry role by command line?

1 ACCEPTED SOLUTION

Master Collaborator

@yagoaparecidoti ,

 

The opposite command doesn't exist, as far as I know. Querying the database is the only option that I'm aware.

 

Cheers,

André

 

--
Was your question answered? Please take some time to click on "Accept as Solution" below this post.
If you find a reply useful, say thanks by clicking on the thumbs up button.

View solution in original post

3 REPLIES 3

Master Collaborator

@yagoaparecidoti ,

 

You can do the reverse with the command "SHOW ROLE GRANT GROUP group name;".

I don't think there's a command to do exactly what you need, but you can query the database directly:

select
  r.ROLE_NAME,
  g.GROUP_NAME
from
  SENTRY_GROUP g
  join SENTRY_ROLE_GROUP_MAP rg on rg.GROUP_ID = g.GROUP_ID
  join SENTRY_ROLE r on r.ROLE_ID = rg.ROLE_ID
order by
  r.ROLE_NAME,
  g.GROUP_NAME
;

 

Cheers,

André

--
Was your question answered? Please take some time to click on "Accept as Solution" below this post.
If you find a reply useful, say thanks by clicking on the thumbs up button.

hi @araujo 

 

this command "SHOW ROLE GRANT GROUP group name" I know and already used, I thought there was a command that did the opposite.

 

well I will check in mysql then and soon return if it worked.

Master Collaborator

@yagoaparecidoti ,

 

The opposite command doesn't exist, as far as I know. Querying the database is the only option that I'm aware.

 

Cheers,

André

 

--
Was your question answered? Please take some time to click on "Accept as Solution" below this post.
If you find a reply useful, say thanks by clicking on the thumbs up button.
Take a Tour of the Community
Don't have an account?
Your experience may be limited. Sign in to explore more.