Delegated GRANT and REVOKE allows admin users to delegate the GRANT privilege to other users using WITH GRANT OPTION.

Configuration

No special configuration increased.

Delegating GRANT/REVOKE Privileges

Hive or Impala users can grant privileges by the SQL statement GRANT ... WITH GRANT OPTION :

GRANT
    priv_type [, priv_type ] ...
    ON table_or_view_name
    TO principal_specification [, principal_specification] ...
    [WITH GRANT OPTION];

 

When WITH GRANT OPTION is specified, the command will give members of the target role privileges to issue their own GRANT statements. Initially, only a pre-defined set of Sentry admin users can issue GRANT statements.

  • No labels