Delegated GRANT and REVOKE allows admin users to delegate the GRANT privilege to other users using WITH GRANT OPTION.
Configuration
No special configuration increased.
Delegating GRANT/REVOKE Privileges
Hive or Impala users can grant privileges by the SQL statement GRANT ... WITH GRANT OPTION :
GRANT priv_type [, priv_type ] ... ON table_or_view_name TO principal_specification [, principal_specification] ... [WITH GRANT OPTION]; |
|---|
When WITH GRANT OPTION is specified, the command will give members of the target role privileges to issue their own GRANT statements. Initially, only a pre-defined set of Sentry admin users can issue GRANT statements.