Start Hive as an end user
You can start Apache Hive as an end user authorized by Apache Ranger. As administrator, you must first set up the user in the operating system and in Ranger.
- Create a user. For example, add a Linux user using the
adduser
operating system command. - Add the user to the Ranger list of users.
- In Ranger, add the user name to Hive policies that grant full access to Hive.
- In Ranger, add the user name to the HDFS all-path policy.
- In Ambari, in Hive > Settings under Security, set
Run as end user instead of Hive user
to True.This is equivalent to setting
hive.server2.enable.doAs=true
in hive-site.xml. - In Ambari, if you get AccessControlException, add the following key and value to
Hive > Configs > Advanced > Custom ranger-hive-security:
xasecure.hive.describetable.showcolumns.authorization.option
andshow-all