forked from docs/doc-exports
Yang, Tong
6182f91ba8
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-authored-by: Yang, Tong <yangtong2@huawei.com> Co-committed-by: Yang, Tong <yangtong2@huawei.com>
21 lines
5.8 KiB
HTML
21 lines
5.8 KiB
HTML
<a name="mrs_01_0972"></a><a name="mrs_01_0972"></a>
|
|
|
|
<h1 class="topictitle1">Authorizing Over 32 Roles in Hive</h1>
|
|
<div id="body1590395285094"><div class="section" id="mrs_01_0972__section1971814572430"><h4 class="sectiontitle">Scenario</h4><p id="mrs_01_0972__p47611257174319">This function applies to Hive.</p>
|
|
<p id="mrs_01_0972__p67618575439">The number of OS user groups is limited, and the number of roles that can be created in Hive cannot exceed 32. After this function is enabled, more than 32 roles can be created in Hive.</p>
|
|
<div class="note" id="mrs_01_0972__note2391914161812"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="mrs_01_0972__ul114102404529"><li id="mrs_01_0972__li124101340105218">After this function is enabled and the table or database is authorized, roles that have the same permission on the table or database will be combined using vertical bars (|). When the ACL permission is queried, the combined result is displayed, which is different from that before the function is enabled. This operation is irreversible. Determine whether to make adjustment based on the actual application scenario.</li><li id="mrs_01_0972__li124801243125210">MRS 3.<em id="mrs_01_0972__i1118522265415">x</em> and later versions support Ranger. If the current component uses Ranger for permission control, you need to configure related policies based on Ranger for permission management. For details, see <a href="mrs_01_1858.html">Adding a Ranger Access Permission Policy for Hive</a>.</li><li id="mrs_01_0972__li16718534122419">After this function is enabled, a maximum of 512 roles (including <strong id="mrs_01_0972__b187758233317">owner</strong>) are supported by default. The number is controlled by the user-defined parameter <strong id="mrs_01_0972__b161518581633">hive.supports.roles.max</strong> of MetaStore. You can change the value based on the actual application scenario.</li></ul>
|
|
</div></div>
|
|
</div>
|
|
<div class="section" id="mrs_01_0972__section3720957144315"><h4 class="sectiontitle">Procedure</h4><ol id="mrs_01_0972__ol181811550174911"><li id="mrs_01_0972__li13806122116487"><span>The Hive service configuration page is displayed.</span><p><ul id="mrs_01_0972__ul1692910323486"><li id="mrs_01_0972__li792916322486">For versions earlier than MRS 1.9.2, log in to MRS Manager, choose <strong id="mrs_01_0972__b7662254865">Services</strong> > <strong id="mrs_01_0972__b15663175412611">Hive</strong> > <strong id="mrs_01_0972__b86649546617">Service Configuration</strong>, and select <strong id="mrs_01_0972__b196654548610">All</strong> from the <strong id="mrs_01_0972__b176660542615">Basic</strong> drop-down list.</li><li id="mrs_01_0972__li979413816488">For MRS 1.9.2 or later, click the cluster name on the MRS console, choose <strong id="mrs_01_0972__b3451165618611">Components</strong> > <strong id="mrs_01_0972__b845285617619">Hive</strong> > <strong id="mrs_01_0972__b1045375612616">Service Configuration</strong>, and select <strong id="mrs_01_0972__b16453175619619">All</strong> from the <strong id="mrs_01_0972__b1245465616611">Basic</strong> drop-down list.<div class="note" id="mrs_01_0972__note73070488542"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="mrs_01_0972__p768934314410">If the <strong id="mrs_01_0972__b16359174613596">Components</strong> tab is unavailable, complete IAM user synchronization first. (On the <strong id="mrs_01_0972__b1136011465597">Dashboard</strong> page, click <strong id="mrs_01_0972__b14360246175919">Synchronize</strong> on the right side of <span class="parmname" id="mrs_01_0972__parmname193603462598"><b>IAM User Sync</b></span> to synchronize IAM users.)</p>
|
|
</div></div>
|
|
</li><li id="mrs_01_0972__li1675864017574">For MRS 3.<em id="mrs_01_0972__i18531958269">x</em> or later, log in to FusionInsight Manager. For details, see <a href="mrs_01_2124.html">Accessing FusionInsight Manager (MRS 3.x or Later)</a>. And choose <strong id="mrs_01_0972__b1996035910620">Cluster</strong> > <em id="mrs_01_0972__i596114591569">Name of the desired cluster</em> > <strong id="mrs_01_0972__b5962559367">Services</strong> > <strong id="mrs_01_0972__b1496325910614">Hive</strong> > <strong id="mrs_01_0972__b1396415914611">Configurations</strong> > <strong id="mrs_01_0972__b29656596615">All Configurations</strong>.</li></ul>
|
|
</p></li><li id="mrs_01_0972__li540112614154"><span>Choose <strong id="mrs_01_0972__b1588110531090">MetaStore(Role)</strong> > <strong id="mrs_01_0972__b8881653999">Customization</strong>, add a customized parameter to the <strong id="mrs_01_0972__b14881653495">hivemetastore-site.xml</strong> parameter file, set <strong id="mrs_01_0972__b15882145310910">Name</strong> to <strong id="mrs_01_0972__b18882185317912">hive.supports.over.32.roles</strong>, and set <strong id="mrs_01_0972__b10882105310917">Value</strong> to <strong id="mrs_01_0972__b158831153797">true</strong>. Restart all Hive instances after the modification.</span></li><li id="mrs_01_0972__li10617754102418"><span>Choose <strong id="mrs_01_0972__b13745144032819">HiveServer(Role)</strong> > <strong id="mrs_01_0972__b12746114012284">Customization</strong>, add a customized parameter to the <strong id="mrs_01_0972__b13746114012819">hive-site.xml</strong> parameter file, set <strong id="mrs_01_0972__b1774694052811">Name</strong> to <strong id="mrs_01_0972__b2746240172814">hive.supports.over.32.roles</strong>, and set <strong id="mrs_01_0972__b1974619400289">Value</strong> to <strong id="mrs_01_0972__b10747040192818">true</strong>. Restart all Hive instances after the modification.</span></li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="mrs_01_0581.html">Using Hive</a></div>
|
|
</div>
|
|
</div>
|
|
|