MapR 5.1 is at End of Life (EOL) and no longer supported. Please see the latest documentation. This documentation is not being updated.

Home
5.1 Administration
This section contains administration information such as managing your cluster, data, users, jobs and security information such as configuring your security environment and auditing.
Security Guide
Getting Started with MapR Security
Describes the two core scenarios that allow quick implementation of security features.
Configure Sentry
The global-policy.ini File

MapR 5.1 Documentation

5.1 Administration
This section contains administration information such as managing your cluster, data, users, jobs and security information such as configuring your security environment and auditing.
- Administrator Guide
- Security Guide
  - Security Overview
    Describes the security features of the MapR Converged Data Platform.
  - Security Architecture
    Describes the default security architecture and additional authentication and encryption capabilities.
  - Logging into a Secure Cluster
    Describes how to use tickets to access a secure MapR cluster.
  - Tickets and Certificates
    Describes how tickets and certificates authenticate users and servers to a cluster.
  - Getting Started with MapR Security
    Describes the two core scenarios that allow quick implementation of security features.
  - Configuring MapR Security
    Describes how to enable security features and configure the components on a secure cluster.
  - Auditing of Cluster Administration and Operations on Directories, Files, Tables, and Streams
    Describes how to process and use audit records to improve data analysis.

The global-policy.ini File

The default global-policy.ini file defines the admin_role, which gives full access to the Hiveserver2 server for the mapr user. The file is located in /opt/mapr/sentry/sentry-<version>/conf in your local file system. You can relocate the file to MapR-FS if you prefer. By default, this file contains these sections:

[groups]
mapr = admin_role
  
[roles]
admin_role = server=HS2

Sample sentry-provider.ini File

[databases]
# Defines the location of the per-DB policy file for the customer's DB or schema
customers = /etc/sentry/customers.ini
  
[groups]
customers_admin = customers_admin_role
  
[roles]
customers_admin_role = server=HS2->db=customers

Sample customers.ini File

[groups]
manager = customers_insert_role, customers_select_role
analyst = customers_select_role
  
[roles]
customers_insert_role = server=HS2->db=customers->table=*->action=insert
customers_select_role = server=HS2->db=customers->table=*->action=select