I take it from this that there is a difference between Table level selection and All column level selection. Perhaps that acts a little bit like an "SELECT ... WITH GRANT" on the object (Teradata SQL). ... View more

@jss thankyou for the tip. I was indeed required to execute an SQL DSL to GRANT SELECT on the employee TABLE. I was then required to GRANT CREATE on default DATABASE to USER. Which obeys ANSI I guess, but it seems adding the resource level privilege by Ranger is not sufficient (and I expect not with Atlas either with a tag). Interestingly from a SQL perspective even though the user creates the view, he needs to be explicitly provided GRANT SELECT on the object they create, which you don't need to do in Teradata SQL. ... View more

Note: Sandbox Version is 2.5(.3) ... View more

Great stuff @Tim Veil. Have you any idea how to do this for AWS? I created a lovely AMI with all the right stuff (ami-e8af968b) but haven't been able to successfully point to it as a Vagrant "Box" and start using "vagrant-aws". Thoughts? Ideas? ... View more