@ Raj ji Yes if it's an HDP cluster Ranger is the only tool to make your administration for Authorization easy else it_dev,it_admin users can individually create their databases which won't be shareable. Unfortunately, even on CDH you have sentry which remind me of Oracle Admin where the permission/authorization is a 3 step and CLI based. Sentry
Create role; grant role permissions, Grant role to users Advantage of Ranger
Centralized security administration to manage all security-related tasks in a central UI or using REST APIs. Fine-grained authorization to do a specific action and/or operation with Hadoop component/tool and managed through a central administration tool Standardize authorization method across all Hadoop components. Enhanced support for different authorization methods - Role-based access control, Geolocalized, Time-based, UDF,attribute-based access control etc. Centralize auditing of user access and administrative actions (security related) within all the components of Hadoop. So your only option is to have each user create own database and tables , there is no concept of grant user X select, create etc in hive. Hope that helps
... View more
