Showing Role|Grant definitions from Ranger HiveAuthorizer
You can use beeline to show the roles granted to users, groups, and
roles.
You can create roles in Ranger or in Hive. You create roles in HIVE using ROLE
commands. such as CREATE ROLE, GRANT / REVOKE ROLE. You can create roles in Ranger,
using the Ranger Admin Web UI, if you have Admin permissions. See related links for more
information about creating roles. The Hive2 command line infterface Beeline returns role
grant defnitions for a specific principal, such as a user, group or role.
Roles must be defined before using beeline to show role|grant definitions.
Run beeline, (the hive2 command line interface) on the Ranger host.
beeline -u jdbc:hive2://<ranger_host_name>
Enter valid syntax to return the role definitions for a specific principal.
Syntax
SHOW ROLE GRANT (USER|GROUP|ROLE)
principal_name;
where
principal_name is USER | GROUP | ROLE name
Beeline outputs query results, as shown in following examples:
SHOW ROLE GRANT USER HDFS -> show roles for user "hdfs"
SHOW ROLE GRANT ROLE -> show roles for role "ITManagers"
