For this article let’s take the supposition that we have a MDM Software handling the enterprise organization. When we add/change an item in a MDM, it goes throw a workflow (validation, dedup, etc…). For synchronizing in real-time to Ranger “Users and Policies Management” the last action on the workflow must be publishing to a broker the information, that can be a JMS based broker(AMQ, RabbitMQ etc ..) or Kafka. Putting the message into a broker gives you the safety of never losing the event.We use HDF to consume, built the payload and call Ranger API. List of hidden Ranger useful API's. To invoke the API's curl -u admin:admin -v -i -s -X POST -H "Accept: application/json" -H "Content-Type: application/json" http://<IP>:6080/service/xusers/secure/users -d @<FILE_PATH> curl -u admin:admin -v -i -s -X GET http://<IP>:6080/service/xusers/users curl -u admin:admin -v -i -s -X DELETE http://xxx:6080/service/xusers/secure/users/$ID_USER Create a user http://<IP>:6080/service/xusers/secure/users Update a user http://<IP>:6080/service/xusers/secure/users/{id} Delete a user http://<IP>:6080/service/xusers/users/userName/{userName}
Create a group http://<IP>:6080/service/xusers/secure/groups Update a group http://<IP>:6080/service/xusers/secure/groups/{id} Delete a group http://<IP>:6080/service/xusers/groups/groupName/{groupName} For Policies API there is a good documentation directly on the Apache Ranger documentation https://cwiki.apache.org/confluence/display/RANGER/REST+APIs+for+Service+Definition%2C+Service+and+Policy+Management Others useful API's Get a particular group by name http://<IP>:6080/service/xusers/groups?name=ha Get particular group details http://<IP>:6080/service/xusers/groups/{id} Get a user's Count http://<IP>:6080/service/xusers/users/count Get particular group details http://<IP>:6080/service/xusers/groups/{id}
... View more
