(Optional) Configuring GaussDB(DWS) and MRS Hive

Before using database watermarks, you have to:

Modify GaussDB(DWS) cluster parameters.
To identify sensitive data and enable privacy protection, you must submit a service ticket to adjust the parameter javaudf_disable_feature of the GaussDB(DWS) cluster. If GassDB(DWS) data is not involved, you do not need to change the value.
Modify Hive User Rights
To perform data watermark operations on MRS Hive data, you must assign related permissions to Hive users as the administrator Ranger.

Log in to the management console.
Click in the upper left corner and select a region or project.
In the navigation tree on the left, click , and choose Analytics > MapReduce Service. The Dashboard page is displayed.
In the cluster list, click the name of the target cluster. The cluster information page is displayed.
Click Access Manager next to MRS Manager. In the dialog box that is displayed, click OK. The Manager login page is displayed.
Enter the default username admin and the password set during cluster creation, and click Log In. The Manager page is displayed.
Choose Cluster > Service > Ranger. The Ranger service overview page is displayed.
Click RangerAdmin in the Basic Information area to go to the Ranger web UI. The type of the admin user in the Ranger is User. Therefore, only the Access Manager and Security Zone pages can be viewed. You need to switch to the rangeradmin user or another user who has the Ranger administrator rights.
1. On the Ranger WebUI, click the username in the upper right corner and choose Log Out to log out the current user.
2. Log in to the system again as user rangeradmin or another user who has the Ranger administrator rights.
On the home page, click the plug-in name in the HADOOP SQL area, for example, Hive.
On the Access tab page, click Add New Policy to add a Hive permission control policy.

Set related parameters based on permission requirements. Set the key parameters described in Table 1. Retain the default values for other parameters.

**Table 1** Hive permission parameters
Parameter	Description	Example Value
Policy Name	Policy name, which can be customized and must be unique in the service.	dataarts_dsc
Database	Name of the Hive database to which the policy applies Change database to global. *, the policy takes effect globally.	global: *
Allow Conditions	Policy allowed condition. You can configure permissions and exceptions allowed by the policy. In the Select Role, Select Group, and Select User columns, select the role, user group, or user to which the permission is to be granted, click Add Conditions, add the IP address range to which the policy applies, and click Add Permissions to add the corresponding permission. You need to configure the Select Group, Select User, and Add Permissions columns. Select Group: Select the user group you want to use to watermark MRS Hive data. Select User: Select the user you want to use to watermark MRS Hive data. If the user is already in the selected user group, you do not need to select it again. Add Permissions: Select Select/Deselect All to select all permissions.	Example: Select Group: dayu_user Select User: dgc_test Add Permissions: All