Use cases
When hierarchical authorization is enabled, child environments inherit roles assigned to a parent environment.
Cloudera Base on premises (root environment):
Supported child environments inherit roles assigned at the parent (root) environment level, including:
- Cloudera Data Warehouse Database Catalogs
- Cloudera Data Warehouse Virtual Warehouses
- Cloudera Data Engineering services
- Cloudera Data Engineering Virtual Clusters
Services:
- Cloudera Data Warehouse Database Catalog : The Cloudera Data Warehouse Virtual Warehouses associated with a Database Catalog inherit the roles assigned to that catalog.
- Cloudera Data Engineering service: The Cloudera Data Engineering Virtual Clusters associated with a Cloudera Data Engineering Service inherit the roles assigned to that service.
Assign the policy at the level where access begins:
- Cloudera Base on premises: Use this level to grant access across Cloudera Data Warehouse and Cloudera Data Engineering child environments.
- Database Catalog: Use this level to grant access only to its associated Cloudera Data Warehouse Virtual Warehouses.
- Cloudera Data Engineering service: Use this level to grant access only to its associated Cloudera Data Engineering Virtual Clusters.
