Delegated GRANT and REVOKE allows admin users to delegate the
GRANT privilege to other users using
WITH GRANT OPTION.
No special configuration increased.
Delegating GRANT/REVOKE Privileges
Hive or Impala users can grant privileges by the SQL statement GRANT ... WITH GRANT OPTION :
priv_type [, priv_type ] ...
TO principal_specification [, principal_specification] ...
[WITH GRANT OPTION];
When WITH GRANT OPTION is specified, the command will give members of the target role privileges to issue their own GRANT statements. Initially, only a pre-defined set of Sentry admin users can issue GRANT statements.