Access control for the shared Cloudera Data Explorer (Hue) service

You can specify user groups you created in the Cloudera Management Console, similar to how you specified them while creating the Virtual Warehouses.

When you specify user groups while creating the shared Data Explorer instance or Virtual Warehouses, the subset of users who have access to the Data Explorer instance as well as the Virtual Warehouse can submit queries through that Virtual Warehouse instance.

If you do not specify user groups while creating a shared Data Explorer instance, then all users within your organization can access the Data Explorer UI. If you do not specify user groups for a Virtual Warehouse, all users within your organization can submit queries through that Virtual Warehouse.

As a best practice, specify user groups while creating Data Explorer and Virtual Warehouse instances so that specific users have access to specific compute resources.

Key differences in database management approach for Virtual Warehouse-level Data Explorer and shared Data Explorer service

All Data Explorer instances linked to a Database Catalog through Virtual Warehouses within a Cloudera Data Warehouse environment share a single database. The Data Explorer database is not deleted unless you deactivate the environment. If you delete a Virtual Warehouse and create a new one, the Data Explorer instance linked to that Virtual Warehouse continues to display old query history and saved queries.

Each shared Data Explorer service instance has its own Data Explorer database. Cloudera Data Warehouse does not delete the Data Explorer database when you delete the shared Data Explorer service instance. The Data Explorer database exists in the backend until a database administrator manually deletes it. Each Data Explorer database is named after the shared Data Explorer service name. In case you have deleted a shared Data Explorer service instance, you can reuse the Data Explorer database by specifying the name of the Data Explorer instance you deleted. This brings back the query history and saved queries.

Cloudera Data Warehouse provides you with a one-time option to copy the Data Explorer database content from the Data Explorer database linked to a Database Catalog to the shared Data Explorer service database while creating a new shared Data Explorer service instance. The data between the two databases is not synchronized after the initial copy event.