Skip to content

Commit 235cd08

Browse files
Update ranger-policies-for-spark.md
Added step to add ranger look up user
1 parent 8e2c3de commit 235cd08

File tree

1 file changed

+9
-5
lines changed

1 file changed

+9
-5
lines changed

articles/hdinsight/spark/ranger-policies-for-spark.md

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -174,9 +174,9 @@ Let's say that you have the policies defined in the Ranger repo already under th
174174

175175
:::image type="content" source="./media/ranger-policies-for-spark/ambari-config-ranger-security.png" alt-text="Screenshot shows Ambari config ranger security." lightbox="./media/ranger-policies-for-spark/ambari-config-ranger-security.png":::
176176

177-
or You can also open this configuration in **/etc/spark3/conf** by using SSH.
177+
or You can also open this configuration in **/etc/spark3/conf** by using SSH.
178178

179-
Edit two configurations (**ranger.plugin.spark.service.name** and **ranger.plugin.spark.policy.cache.dir**) to point to the old policy repo **oldclustername_hive**, and then save the configurations.
179+
Edit two configurations (**ranger.plugin.spark.service.name** and **ranger.plugin.spark.policy.cache.dir**) to point to the old policy repo **oldclustername_hive**, and then save the configurations.
180180

181181
Ambari:
182182

@@ -186,11 +186,15 @@ Let's say that you have the policies defined in the Ranger repo already under th
186186

187187
:::image type="content" source="./media/ranger-policies-for-spark/config-update-xml.png" alt-text="Screenshot that shows a configuration update for service name in XML." lightbox="./media/ranger-policies-for-spark/config-update-xml.png":::
188188

189-
1. Click on edit button for **oldclustername_hive** and add **rangersparklookup** user in the **policy.download.auth.users** and **tag.download.auth.users** list.
189+
1. Restart the Ranger and Spark services from Ambari.
190+
191+
1. Open the Ranger admin UI and click on edit button under **HADOOP SQL** service.
190192

191-
:::image type="content" source="./media/ranger-policies-for-spark/" alt-text="Screenshot that shows edit option for ranger service." lightbox="./media/ranger-policies-for-spark/":::
193+
:::image type="content" source="./media/ranger-policies-for-spark/ranger-service-edit.png" alt-text="Screenshot that shows edit option for ranger service." lightbox="./media/ranger-policies-for-spark/ranger-service-edit.png":::
192194

193-
1. Restart the Ranger and Spark services from Ambari.
195+
1. For **oldclustername_hive** service, add **rangersparklookup** user in the **policy.download.auth.users** and **tag.download.auth.users** list and click save.
196+
197+
:::image type="content" source="./media/ranger-policies-for-spark/add-new-user-rangerlookup.png" alt-text="Screenshot that shows edit option for ranger service." lightbox="./media/ranger-policies-for-spark/add-new-user-rangerlookup.png":::
194198

195199
The policies are applied on databases in the Spark catalog. If you want to access the databases in the Hive catalog:
196200

0 commit comments

Comments
 (0)