Add an Indexima Policy in Ranger

Overview

Now, when you click on the freshly created service, you have access to the Indexima Policies as shown in the following screen.

Click on the Add New Policy button to create a new policy and fill the fields.

Admin policies

Admin role can not be defined through Ranger.

You can define admin users by setting the parameter users.in.admin.role.

Monitor rights policies

Warehouse policies are designed for managing rights on Monitor (see monitor rights)

• Name the policy
• Choose warehouse in the combo box  (Database/Warehouse/schema)

• Define permissions by choosing among the MONITOR_* rights

Schema Policies

• Name the policy
• Choose schema in the combo box  (Database/Warehouse/schema)
• Define a list of schemas and use the character * as a wildcard

• Define permissions by choosing Owner
  • the other permissions would be relevant on other levels

Table Policies

• Name the policy
• Choose Database in the combo box  (Database/Warehouse/schema)
• Select the INDEXIMA database (= schema). 
• Select the INDEXIMA dataspaces/table. 
• Pick up columns on with you want to apply privileges.

For each object (schema, table, columns), the following rules applied

• Type the object to define a right on that specific object 
• Use * with a string  as a wildcard to define a right on a family of objects
• Use * to define a right on all objects

• Define permissions by choosing among SELECT / INSERT / DELETE / OWNER
  • you may choose UPDATE, however, there is no rule related to this right.