Cloudera Docs

Using UI

Learn how to create a resource policy in Ranger to grant the Assume_Role permissions for the user using UI.

  1. Sign in to Cloudera Manager.
  2. In the left navigation, click Clusters.
  3. Select the relevant Ranger cluster.
  4. Click the Web UI dropdown menu and click one of the Ranger Admin Web UI. The Ranger log in page displays.
  5. Sign in to Ranger. The Ranger home page displays.
  6. In the left navigation pane, select Resource Policies, and then select cm_ozone.
  7. Click Add New Policy button. The Create Policy page displays.
    Figure 1. Create new policy in Ranger
  8. In the Policy Name box, enter a descriptive name for the policy. For example, iceberg assume role policy.
  9. In the Resources section, click the Ozone Volume drop-down menu and select Role.
  10. In the Add policy Resources text box, enter the role name (for example, iceberg-data-all-access), wait for the list to update, and select Create [***ROLE_NAME***].
  11. In the Allow Rules section, perform the following actions:
    1. Under Select Users, select the service user (for example, svc-iceberg-rest-catalog).
    2. Under Permissions, select the plus sign (+).
    3. Select the Assume_Role check box, and then select the check mark at the bottom of the dialog box.
  12. Click Save.