how to know which group is linked to a sentry role by command line

[#1]

hello cloudera community,

how can we find out which group is tied to a sentry role by command line?

[#2]

@yagoaparecidoti ,

You can do the reverse with the command "SHOW ROLE GRANT GROUP group name;".

I don't think there's a command to do exactly what you need, but you can query the database directly:

select
  r.ROLE_NAME,
  g.GROUP_NAME
from
  SENTRY_GROUP g
  join SENTRY_ROLE_GROUP_MAP rg on rg.GROUP_ID = g.GROUP_ID
  join SENTRY_ROLE r on r.ROLE_ID = rg.ROLE_ID
order by
  r.ROLE_NAME,
  g.GROUP_NAME
;

Cheers,

André

[#3]

hi @araujo 

this command "SHOW ROLE GRANT GROUP group name" I know and already used, I thought there was a command that did the opposite.

well I will check in mysql then and soon return if it worked.

[#4 · Accepted solution]

@yagoaparecidoti ,

The opposite command doesn't exist, as far as I know. Querying the database is the only option that I'm aware.

Cheers,

André