Sentry to Ranger Replication

As part of a Hive replication policy, you can choose to migrate relevant Hive or Impala Sentry policies into Ranger.

When you choose to migrate the Sentry policies to Ranger, the Replication Manager performs the following tasks automatically:

  1. Exports each Sentry policy as a single JSON file using the authzmigrator tool. The JSON file contains a list of resources, such as URI, database, table, or column and the policies that apply to it.
  2. Copies the exported Sentry policies to the target cluster using the DistCp tool.
  3. Ingests the Sentry policies into Ranger after filtering the policies related to the replication job using the authzmigrator tool through the Ranger rest endpoint. To filter the policies, the Replication Manager uses a filter expression that is passed to the authzmigrator tool by Cloudera Manager.