This blog post was co-authored by Mitchell Tracy and Monica Cellio.
Hadoop clusters can use authorization services to determine which users can access what data in Hive and, by extension, HDFS. In Vertica 9.0 we added support for one of the most common such services, Apache Sentry, and in 9.0.1 we now support Apache Ranger too.
Apache Ranger and Apache Sentry are projects in the Hadoop ecosystem which provide centralized role-based access control (RBAC) to a Hadoop cluster. After installing either service in your Hadoop cluster, you can create roles, grant and revoke privileges for those roles, and then apply the roles to groups of users. This allows for quick, central administration of privileges to your Hive data. Now, no matter which service you use in your Hadoop cluster, Vertica can take advantage of it to govern database users’ access to Hive data.
To learn more about using the HCatalog Connector with Ranger and Sentry, see Configuring Kerberos for the HCatalog Connector
. For more information about Ranger, see Apache Ranger. For more information about using Sentry, see The Sentry Service
in the Cloudera documentation.