Allowing Users without ADMIN Permission to Create Temporary Functions

Scenario

You must have ADMIN permission when creating temporary functions on Hive of the open source community version.

MRS Hive supports the configuration of the function for creating temporary functions with ADMIN permission. The function is disabled by default, which is the same as that of the open-source community version.

You can modify configurations of this function. After the function is enabled, you can create temporary functions without ADMIN permission. If this parameter is set to false, security risks exist.

The security mode supports the configuration of whether the ADMIN permission is required for creating temporary functions, but the common mode does not support this function.

Procedure

1. The Hive service configuration page is displayed.
   • For versions earlier than MRS 3.x, click the cluster name. On the cluster details page that is displayed, choose Components > Hive > Service Configuration, and select All from the Basic drop-down list.
     

     If the Components tab is unavailable, complete IAM user synchronization first. (On the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users.)

   • For MRS 3.x or later, log in to FusionInsight Manager. For details, see Accessing FusionInsight Manager (MRS 3.x or Later). And choose Cluster > Name of the desired cluster > Services > Hive > Configurations > All Configurations.

2. Enter the parameter name in the search box, search for hive.security.temporary.function.need.admin, change the parameter value to true or false, and restart all HiveServer instances.
   

   • If this parameter is set to true, the ADMIN permission is required for creating temporary functions, which is the same as that in the open source community.
   • If this parameter is set to false, the ADMIN permission is not required for creating temporary functions.