هذه الصفحة غير متوفرة حاليًا بلغتك المحلية. نحن نعمل جاهدين على إضافة المزيد من اللغات. شاكرين تفهمك ودعمك المستمر لنا.

Compute
Elastic Cloud Server
Huawei Cloud Flexus
Bare Metal Server
Auto Scaling
Image Management Service
Dedicated Host
FunctionGraph
Cloud Phone Host
Huawei Cloud EulerOS
Networking
Virtual Private Cloud
Elastic IP
Elastic Load Balance
NAT Gateway
Direct Connect
Virtual Private Network
VPC Endpoint
Cloud Connect
Enterprise Router
Enterprise Switch
Global Accelerator
Management & Governance
Cloud Eye
Identity and Access Management
Cloud Trace Service
Resource Formation Service
Tag Management Service
Log Tank Service
Config
OneAccess
Resource Access Manager
Simple Message Notification
Application Performance Management
Application Operations Management
Organizations
Optimization Advisor
IAM Identity Center
Cloud Operations Center
Resource Governance Center
Migration
Server Migration Service
Object Storage Migration Service
Cloud Data Migration
Migration Center
Cloud Ecosystem
KooGallery
Partner Center
User Support
My Account
Billing Center
Cost Center
Resource Center
Enterprise Management
Service Tickets
HUAWEI CLOUD (International) FAQs
ICP Filing
Support Plans
My Credentials
Customer Operation Capabilities
Partner Support Plans
Professional Services
Analytics
MapReduce Service
Data Lake Insight
CloudTable Service
Cloud Search Service
Data Lake Visualization
Data Ingestion Service
GaussDB(DWS)
DataArts Studio
Data Lake Factory
DataArts Lake Formation
IoT
IoT Device Access
Others
Product Pricing Details
System Permissions
Console Quick Start
Common FAQs
Instructions for Associating with a HUAWEI CLOUD Partner
Message Center
Security & Compliance
Security Technologies and Applications
Web Application Firewall
Host Security Service
Cloud Firewall
SecMaster
Anti-DDoS Service
Data Encryption Workshop
Database Security Service
Cloud Bastion Host
Data Security Center
Cloud Certificate Manager
Edge Security
Situation Awareness
Managed Threat Detection
Blockchain
Blockchain Service
Web3 Node Engine Service
Media Services
Media Processing Center
Video On Demand
Live
SparkRTC
MetaStudio
Storage
Object Storage Service
Elastic Volume Service
Cloud Backup and Recovery
Storage Disaster Recovery Service
Scalable File Service Turbo
Scalable File Service
Volume Backup Service
Cloud Server Backup Service
Data Express Service
Dedicated Distributed Storage Service
Containers
Cloud Container Engine
Software Repository for Container
Application Service Mesh
Ubiquitous Cloud Native Service
Cloud Container Instance
Databases
Relational Database Service
Document Database Service
Data Admin Service
Data Replication Service
GeminiDB
GaussDB
Distributed Database Middleware
Database and Application Migration UGO
TaurusDB
Middleware
Distributed Cache Service
API Gateway
Distributed Message Service for Kafka
Distributed Message Service for RabbitMQ
Distributed Message Service for RocketMQ
Cloud Service Engine
Multi-Site High Availability Service
EventGrid
Dedicated Cloud
Dedicated Computing Cluster
Business Applications
Workspace
ROMA Connect
Message & SMS
Domain Name Service
Edge Data Center Management
Meeting
AI
Face Recognition Service
Graph Engine Service
Content Moderation
Image Recognition
Optical Character Recognition
ModelArts
ImageSearch
Conversational Bot Service
Speech Interaction Service
Huawei HiLens
Video Intelligent Analysis Service
Developer Tools
SDK Developer Guide
API Request Signing Guide
Terraform
Koo Command Line Interface
Content Delivery & Edge Computing
Content Delivery Network
Intelligent EdgeFabric
CloudPond
Intelligent EdgeCloud
Solutions
SAP Cloud
High Performance Computing
Developer Services
ServiceStage
CodeArts
CodeArts PerfTest
CodeArts Req
CodeArts Pipeline
CodeArts Build
CodeArts Deploy
CodeArts Artifact
CodeArts TestPlan
CodeArts Check
CodeArts Repo
Cloud Application Engine
MacroVerse aPaaS
KooMessage
KooPhone
KooDrive
On this page

Configuring User Permissions for Spark Tables, Columns, and Databases

Updated on 2024-10-08 GMT+08:00

Scenario

You can configure related permissions if you need to access tables or databases created by other users. SparkSQL supports column-based permission control. If a user needs to access some columns in tables created by other users, the user must be granted the permission for columns. The following describes how to grant table, column, and database permissions to users by using the role management function of Manager.

Procedure

The operations for granting permissions on SparkSQL tables, columns, and databases are the same as those for Hive. For details, see Hive User Permission Management.

NOTE:
  • Any permission for a table in the database is automatically associated with the HDFS permission for the database directory to facilitate permission management. When any permission for a table is canceled, the system does not automatically cancel the HDFS permission for the database directory to ensure performance. In this case, users can only log in to the database and view table names.
  • When the query permission on a database is added to or deleted from a role, the query permission on tables in the database is automatically added to or deleted from the role. This mechanism is inherited from Hive.
  • In Spark, the column name of the struct data type cannot contain special characters, that is, characters other than letters, digits, and underscores (_). If the column name of the struct data type contains special characters, the column cannot be displayed on the FusionInsight Manager console when you grant permissions to roles on the role page.

Concepts

SparkSQL statements are processed in SparkSQL. Table 1 describes the permission requirements.

Table 1 Scenarios of using SparkSQL tables, columns, or databases

Scenario

Required Permission

CREATE TABLE

CREATE, RWX+ownership (for creating external tables - the location)

NOTE:

When creating datasource tables in a specified file path, the RWX and ownership permission on the file next to the path is required.

DROP TABLE

Ownership (of table)

DROP TABLE PROPERTIES

Ownership

DESCRIBE TABLE

Select

SHOW PARTITIONS

Select

ALTER TABLE LOCATION

Ownership, RWX+ownership (for new location)

ALTER PARTITION LOCATION

Ownership, RWX+ownership (for new partition location)

ALTER TABLE ADD PARTITION

Insert, RWX and ownership (for partition location)

ALTER TABLE DROP PARTITION

Delete

ALTER TABLE(all of them except the ones above)

Update and Ownership

TRUNCATE TABLE

Ownership

CREATE VIEW

Select, Grant Of Select, and CREATE

ALTER VIEW PROPERTIES

Ownership

ALTER VIEW RENAME

Ownership

ALTER VIEW ADD PARTS

Ownership

ALTER VIEW AS

Ownership

ALTER VIEW DROPPARTS

Ownership

ANALYZE TABLE

Select and Insert

SHOW COLUMNS

Select

SHOW TABLE PROPERTIES

Select

CREATE TABLE AS SELECT

Select and CREATE

SELECT

Select

NOTE:

The same as tables, you need to have the Select permission on a view when performing a SELECT operation on the view.

INSERT

Insert and Delete (for overwrite)

LOAD

Insert, Delete, and RWX+ownership(input location)

SHOW CREATE TABLE

Select and Grant Of Select

CREATE FUNCTION

ADMIN

DROP FUNCTION

ADMIN

DESC FUNCTION

-

SHOW FUNCTIONS

-

MSCK (metastore check)

Ownership

ALTER DATABASE

ADMIN

CREATE DATABASE

-

SHOW DATABASES

-

EXPLAIN

Select

DROP DATABASE

Ownership

DESC DATABASE

-

CACHE TABLE

Select

UNCACHE TABLE

Select

CLEAR CACHE TABLE

ADMIN

REFRESH TABLE

Select

ADD FILE

ADMIN

ADD JAR

ADMIN

HEALTHCHECK

-

We use cookies to improve our site and your experience. By continuing to browse our site you accept our cookie policy. Find out more

Feedback

Feedback

Feedback

0/500

Selected Content

Submit selected content with the feedback