I was able to create a policy successfully with the command-line in your post. There should be some log in one of these files: xa_portal.log, catalina.out, most recent access_log*.log. Can you check again? This error could be due to incorrect JSON as well - if this is the cause, error details should be in catalina.out. ... View more

Which version of Ranger do you use? This looks like the issue fixed in https://issues.apache.org/jira/browse/RANGER-1175. @mehul.parikh ... View more

>> If we use different permissions (like create-database), which resource will we define it on ? We can't define it on the table level. There is no restriction on the permissions that can be specified on a specific resource. Following policies can be used for your usecases. Please review. 1. To permit creation of databases named like testdb*: resource: { database=testdb*; schema=*; table=* }; permission: [ create-database ] 2. To permit creation of schemas under database db1: resource: { database=db1; schema=*; table=* }; permission: [ create-schema ] 3. To permit creation of tables under database=db1; schema=schema1: resource: { database=db1; schema=schema1; table=* }; permission: [ create-table ] ... View more