Skip to content

Commit faf0727

Browse files
authored
Update troubleshoot-oozie.md
1 parent a9a42ed commit faf0727

File tree

1 file changed

+19
-0
lines changed

1 file changed

+19
-0
lines changed

articles/hdinsight/troubleshoot-oozie.md

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -99,6 +99,25 @@ For example, for the job example from [Use Hadoop Oozie workflows](hdinsight-use
9999
```xml
100100
<archive>mssql-jdbc-7.0.0.jre8.jar</archive>
101101
```
102+
## Oozie UI – Default user access rights
103+
104+
### Issue
105+
106+
For the created HDInsight Oozie clusters, users by default would have read access to all jobs, write access to their own jobs, and can write to jobs based on ACLs. Admin users have broader permissions, including write access to all jobs and operations. In Oozie clusters, if security configuration is disabled, all users are treated as admins and HDInsight Oozie clusters have security configuration disabled by default.
107+
108+
### Cause
109+
110+
If security is disabled, all users are treated as admin users which is a standard behavior in Oozie and not specific to HDInsight platform. Reference to the same available in the following Oozie page - [Oozie - User Authentication Public Doc](https://oozie.apache.org/docs/4.2.0/AG_Install.html#:~:text=If%20security%20is,in%20oozie.service)
111+
112+
### Resolution
113+
114+
Admin users can be defined through specific property. ACLs are set during job submission and can include both usernames and groups. The system checks if the user belongs to the necessary groups to perform actions.
115+
116+
Set this property oozie.service.AuthorizationService.security.enabled=true in ambari
117+
118+
Ambari UI -> Services -> Oozie -> Configs -> Advanced -> Search and Set to True -> Restart All Affected
119+
120+
Admin users are determined from the list of admin groups, specified in oozie.service.AuthorizationService.admin.groups property. Use commas to separate multiple groups, spaces, tabs and ENTER characters are trimmed.
102121

103122
## Next steps
104123

0 commit comments

Comments
 (0)