Help Center/ MapReduce Service/ Component Operation Guide (LTS)/ Using YARN/ Yarn User Permission Management/ Creating YARN Roles
Updated on 2026-06-27 GMT+08:00
View PDF
Share

Creating YARN Roles

Scenarios

Create and configure a YARN role. The YARN role can be assigned YARN administrator permissions to manage YARN queue resources.

If the current component uses Ranger for permission control, you need to configure permission management policies based on Ranger. For details, see Adding a Ranger Access Permission Policy for YARN.

MRS 3.6.0 or later: If a user is assigned to multiple roles or tenants that have default queues, and no queue is specified when the user submits a job, the system selects the first queue based on the alphabetical order of the role or tenant names.

For MRS 3.6.0 or later: When submitting jobs, you are advised to explicitly specify the queue. Do not rely on the default queue automatically selected by the system. If no queue is specified and the first queue in alphabetical order is unavailable, the current job submission fails.

Procedure

  1. Log in to FusionInsight Manager.

    For details about how to log in to FusionInsight Manager, see Accessing MRS Manager.

  2. Choose System > Permission > Role.
  3. Click Create Role and set a role name and enter description.
  4. Refer Table 1 to configure resource permissions for roles.

    YARN permissions:

    • Cluster management: YARN administrator permissions.
    • Queue scheduling: queue resource management.
      Table 1 Setting a role

      Task

      Operation

      Setting the YARN administrator permission

      In the Configure Resource Permission table, choose Name of the desired cluster > Yarn > Cluster Management.

      NOTE:

      The YARN service needs to be restarted to set the YARN administrator permission so that the saved role configuration can take effect.

      Setting the permission for a user to submit tasks in a specified YARN queue
      1. In the Configure Resource Permission table, choose Name of the desired cluster > Yarn > Scheduling Queue > root.
      2. In the Permission column of the specified queue, select Submit.
      3. The Default Queue can be set based on site requirements. If no queue name is specified when you submit a job, the job is submitted to the default queue. This function is available for MRS 3.6.0 or later only.

      Setting the permission for a user to manage tasks in a specified YARN queue
      1. In the Configure Resource Permission table, choose Name of the desired cluster > Yarn > Scheduling Queue > root.
      2. In the Permission column of the specified queue, select Manage.
      3. The Default Queue can be set based on site requirements. If no queue name is specified when you submit a job, the job is submitted to the default queue. This function is available for MRS 3.6.0 or later only.

    If a YARN role contains the Submit or Manage permission for a parent queue, the sub-queue inherits the permission by default; that is, the Submit or Manage permission is automatically added to the sub-queue. Permissions inherited by sub-queues will not be displayed as selected in the Configure Resource Permission table.

    If you select only the Submit permission of a parent queue when setting the YARN role, you need to manually specify the queue name when submitting tasks as a user with the permission of this role. Otherwise, when the parent queue has multiple sub-queues, the system does not automatically determine the queue to which the task is submitted and therefore submits the task to the default queue.

  5. Click OK.

    After a role is assigned to a user, the user obtains the corresponding permissions. For details about how to create a user, see Creating an MRS Cluster User.