What Can I Do If a Message Indicating Insufficient Permission Is Displayed When I Access HBase Phoenix?

Question

When a tenant accesses Phoenix, an error message is displayed indicating that the tenant has insufficient rights.

Answer

A tenant must be associated with the HBase service and YARN queue when being created.

To operate Phoenix, tenants need to obtain the RWX permission on Phoenix system catalogs.

The following is an example:

The created tenant is hbase. Log in to the HBase Shell as the admin user and run the scan 'hbase:acl' command to query the role of the tenant. The role is hbase_1450761169920 (in tenant name_timestamp format).

Run the following commands to grant permissions (if the Phoenix system table is not generated, log in to the Phoenix client as user admin and then return to the HBase Shell for authorization):

grant '@hbase_1450761169920','RWX','SYSTEM.CATALOG'

grant '@hbase_1450761169920','RWX','SYSTEM.FUNCTION'

grant '@hbase_1450761169920','RWX','SYSTEM.SEQUENCE'

grant '@hbase_1450761169920','RWX','SYSTEM.STATS'

Create user phoenix and bind it to tenant hbase. Then user phoenix can access the Phoenix client.