Accessing Iceberg tables

CDP uses Apache Ranger to provide centralized security administration and management. The Ranger Admin UI is the central interface for security administration. You can use Ranger to create two policies that allow users to query Iceberg tables.

How you open the Ranger Admin UI differs from one CDP service to another. In Management Console, you can select your environment, and then click Environment Details > Quick Links > Ranger.

You log into the Ranger Admin UI, and the Ranger Service Manager appears.

Policies for accessing tables on S3

The default policies that appear differ from service to service. You need to set up two Hadoop SQL policies to query Iceberg tables:

• One to authorize users to access the Iceberg files

  Follow steps in "Editing a policy to access Iceberg files" below.

• One to authorize users to query Iceberg tables

  Follow steps in "Creating a policy to query an Iceberg table" below.

Prerequisites

• Obtain the RangerAdmin role.
• Get the user name and password your Administrator set up for logging into the Ranger Admin.

  The default credentials for logging into the Ranger Admin Web UI are admin/admin123.