Apache Sentry - Show command

["Murugasamy, Thangamani" <Th...@epsilon.com>]

Hi Team,

We are using Sentry for fine grain access on Cloudera distributed Hadoop, I have audit requirement to list the groups based on role, I don't see any option to get that details.

Example,

Role :admin_role

I need the all grantee of admin_role. I can get the granted access of this table, but notable to get grantee list.

Thanks
Mani

Thangamani Murugasamy
Mobile-469-586-8146
Work-469-262-1172
tmurugasamy@epsilon.com<ma...@epsilon.com>

Re: Apache Sentry - Show command

[Alexander Kolbasov <ak...@cloudera.com>]

I don't think we have this feature. It is available it in the sentrytool
that isn't officially supported and doesn't work in kerberos environments.
This is something that can be done as part of the Sentry Shell (either the
original or reworked one). We had a discussion about the Shell improvements
a while ago but didn't see much interest from the community to pursue it
further.

Would you like to open a JIRA request for such feature?

- Alex



On Thu, Jun 8, 2017 at 10:57 AM, Murugasamy, Thangamani <
Thangamani.Murugasamy@epsilon.com> wrote:

> Hi Team,
>
> We are using Sentry for fine grain access on Cloudera distributed Hadoop,
> I have audit requirement to list the groups based on role, I don't see any
> option to get that details.
>
> Example,
>
> Role :admin_role
>
> I need the all grantee of admin_role. I can get the granted access of this
> table, but notable to get grantee list.
>
> Thanks
> Mani
>
> Thangamani Murugasamy
> Mobile-469-586-8146
> Work-469-262-1172
> tmurugasamy@epsilon.com<ma...@epsilon.com>
>
>