Skip to content

Commit ce0c6f4

Browse files
authored
Update ranger-policies-for-spark.md
1 parent 1ac6c12 commit ce0c6f4

File tree

1 file changed

+12
-14
lines changed

1 file changed

+12
-14
lines changed

articles/hdinsight/spark/ranger-policies-for-spark.md

Lines changed: 12 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ An Apache Spark cluster in HDInsight version 5.1 with [Enterprise security packa
3131

3232
## Create Domain users
3333

34-
See [Create an HDInsight cluster with ESP](../domain-joined/apache-domain-joined-configure-using-azure-adds.md#create-an-hdinsight-cluster-with-esp), for information on how to create **sparkuser1** domain users. In a production scenario, domain users come from your Active Directory tenant.
34+
See [Create an HDInsight cluster with ESP](../domain-joined/apache-domain-joined-configure-using-azure-adds.md#create-an-hdinsight-cluster-with-esp), for information on how to create **sparkuser** domain users. In a production scenario, domain users come from your Active Directory tenant.
3535

3636
## Create Ranger policy
3737

@@ -58,7 +58,7 @@ In this section, you create two Ranger policies;
5858
| Hive Database | default |
5959
| table | hivesampletable |
6060
| Hive Column | * |
61-
| Select User | sparkuser1 |
61+
| Select User | sparkuser |
6262
| Permissions | select |
6363

6464
:::image type="content" source="./media/ranger-policies-for-spark/sample-policy-details.png" alt-text="Screenshot shows sample policy details." lightbox="./media/ranger-policies-for-spark/sample-policy-details.png":::
@@ -98,7 +98,7 @@ The following example explains how to create a policy to mask a column.
9898
|Hive Database|default|
9999
|Hive table| hivesampletable|
100100
|Hive column|devicemake|
101-
|Select User|sparkuser2|
101+
|Select User|sparkuser|
102102
|Permissions|select|
103103
|Masking options|hash|
104104

@@ -120,18 +120,9 @@ The following example explains how to create a policy to mask a column.
120120

121121

122122
> [!NOTE]
123-
>By default, the policies for hive and spark-sql will be common in Ranger. To have the separate policies for hive
123+
> By default, the policies for hive and spark-sql will be common in Ranger.
124+
124125

125-
126-
127-
### Known issues
128-
129-
- Apache Ranger Spark-sql integration not works if Ranger admin is down.
130-
- Ranger DB could be overloaded if >20 spark sessions are launched concurrently because of continuous policy pulls.
131-
- In Ranger Audit logs, “Resource” column, on hover, doesn’t show the entire query which got executed.
132-
133-
134-
135126

136127
## Guideline for setting up Apache Ranger for Spark-sql
137128

@@ -209,5 +200,12 @@ Points to consider:
209200
:::image type="content" source="./media/ranger-policies-for-spark/change-metastore-config.png" alt-text="Screenshot shows change metastore config." lightbox="./media/ranger-policies-for-spark/change-metastore-config.png":::
210201

211202

203+
### Known issues
204+
205+
- Apache Ranger Spark-sql integration not works if Ranger admin is down.
206+
- Ranger DB could be overloaded if >20 spark sessions are launched concurrently because of continuous policy pulls.
207+
- In Ranger Audit logs, “Resource” column, on hover, doesn’t show the entire query which got executed.
208+
209+
212210

213211

0 commit comments

Comments
 (0)