Here is an example using a Hive db: Login as Ranger admin and create a new policy giving user1 all permissions to a database called hivedb1, all tables, all columns. Check "Delegate admin" for user1 and save the policy. Now, login to Ranger as user1, and click the Hive repo. The just created policy on hivedb1 will be listed there. Now you can create child policies based on hivedb1, for example you can create a policy giving permissions to user2 only to some tables of hivedb1 and their columns, and user3 to some other tables and columns. So, user1 fully controls (is a delegated admin of) hivedb1. user1 can also modify the base policy, for example by adding user4 and giving him select only permission to hivedb1. I tried this in HDP-2.3.4, there might be some differencies in older versions.
... View more
