vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/mrs/component-operation-guide-lts/mrs_01_1862.html
Yang, Tong 48706b7552 MRS COMP-LTS 320-lts.1 version 
Reviewed-by: Kacur, Michal <michal.kacur@t-systems.com>
Co-authored-by: Yang, Tong <yangtong2@huawei.com>
Co-committed-by: Yang, Tong <yangtong2@huawei.com>
2024-04-12 12:51:10 +00:00

302 lines
69 KiB
HTML
Raw Blame History

<a name="mrs_01_1862"></a><a name="mrs_01_1862"></a>
<h1 class="topictitle1">Adding a Ranger Access Permission Policy for HetuEngine</h1>
<div id="body8662426"><div class="section" id="mrs_01_1862__en-us_topic_0000001173630648_section1773015413812"><h4 class="sectiontitle">Scenario</h4><p id="mrs_01_1862__en-us_topic_0000001173630648_p145912965417">Ranger administrators can use Ranger to configure the permission to manage databases, tables, and columns of data sources for <span id="mrs_01_1862__en-us_topic_0000001173630648_text18320444105010">HetuEngine</span> users.</p>
</div>
<div class="section" id="mrs_01_1862__en-us_topic_0000001173630648_section11493172153315"><h4 class="sectiontitle">Prerequisites</h4><ul id="mrs_01_1862__en-us_topic_0000001173630648_ul5357197143515"><li id="mrs_01_1862__en-us_topic_0000001173630648_li735717193519">The Ranger service has been installed and is running properly.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li19563173342811">You have created users, user groups, or roles for which you want to configure permissions.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1885285219356">The users have been added to the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b97931337115312">hetuadmin</strong> group.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li11144192193718">Before using <span id="mrs_01_1862__en-us_topic_0000001173630648_text7483142043015">HetuEngine</span>, ensure that the client operator or user in the configuration file for connecting to the data source has the expected operation permission. If the user does not have it, configure the permission by referring to the corresponding data source permission requirements.</li></ul>
</div>
<div class="section" id="mrs_01_1862__en-us_topic_0000001173630648_section123781516381"><h4 class="sectiontitle">Procedure</h4><ol id="mrs_01_1862__en-us_topic_0000001173630648_ol1374718171013"><li id="mrs_01_1862__en-us_topic_0000001173630648_li181773582294"><span>Log in to the Ranger web UI. Click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b216812665612">HetuEngine</strong> in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b10174196125611">PRESTO</strong> area on the homepage.</span></li><li id="mrs_01_1862__en-us_topic_0000001173630648_li62151559132918"><span>On the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b144159158565">Access</strong> tab page, click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b442118159568">Add New Policy</strong> to add a <span id="mrs_01_1862__en-us_topic_0000001173630648_text56021621103015">HetuEngine</span> permission control policy.</span></li><li id="mrs_01_1862__en-us_topic_0000001173630648_li2838111393019"><span>Configure the parameters listed in the table below based on the service demands.</span><p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="mrs_01_1862__en-us_topic_0000001173630648_table13041634123020" frame="border" border="1" rules="all"><caption><b>Table 1 </b><span id="mrs_01_1862__en-us_topic_0000001173630648_text4549192212306">HetuEngine</span> permission parameters</caption><thead align="left"><tr id="mrs_01_1862__en-us_topic_0000001173630648_row33045341301"><th align="left" class="cellrowborder" valign="top" width="28.28%" id="mcps1.3.3.2.3.2.1.2.3.1.1"><p id="mrs_01_1862__en-us_topic_0000001173630648_p250385903017">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="71.72%" id="mcps1.3.3.2.3.2.1.2.3.1.2"><p id="mrs_01_1862__en-us_topic_0000001173630648_p1750345915308">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="mrs_01_1862__en-us_topic_0000001173630648_row330483473019"><td class="cellrowborder" valign="top" width="28.28%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p16503115912306">Policy Name</p>
</td>
<td class="cellrowborder" valign="top" width="71.72%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1150325915301">Policy name, which can be customized and must be unique in the service.</p>
<ul id="mrs_01_1862__en-us_topic_0000001173630648_ul1561124615353"><li id="mrs_01_1862__en-us_topic_0000001173630648_li2611546153514"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b1817138102611">Enabled</strong>: Enable the current policy.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li2205165173617"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b19324194342620">Disabled</strong>: Disable the current policy.</li></ul>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row67081441161210"><td class="cellrowborder" valign="top" width="28.28%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p119259713409">Policy Conditions</p>
</td>
<td class="cellrowborder" valign="top" width="71.72%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p9935105714451">IP address filtering policy, which can be customized. You can enter one or more IP addresses or IP address segments. The IP address can contain the wildcard character (*), for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b169684915170">192.168.1.10</strong>,<strong id="mrs_01_1862__en-us_topic_0000001173630648_b1610184941719">192.168.1.20</strong>, or <strong id="mrs_01_1862__en-us_topic_0000001173630648_b191011349141716">192.168.1.*</strong>.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row139541914162615"><td class="cellrowborder" valign="top" width="28.28%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p8717319192615">Policy Label</p>
</td>
<td class="cellrowborder" valign="top" width="71.72%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p11954514142619">A label specified for the current policy. You can search for reports and filter policies based on labels.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row10304163418303"><td class="cellrowborder" valign="top" width="28.28%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p195031559193017">Presto Catalog</p>
</td>
<td class="cellrowborder" valign="top" width="71.72%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p876318142173">Name of the data source catalog to which the policy applies. If this parameter is set to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b969977257">*</strong>, the policy applies to all catalogs.</p>
<ul id="mrs_01_1862__en-us_topic_0000001173630648_ul611425933713"><li id="mrs_01_1862__en-us_topic_0000001173630648_li01141459113713"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b13675455122618">Include</strong>: The policy applies to the current input object.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li5114165911374"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b158787916271">Exclude</strong>: The policy applies to objects other than the current input.</li></ul>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row130463413301"><td class="cellrowborder" valign="top" width="28.28%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p9503145993013">Schema</p>
</td>
<td class="cellrowborder" valign="top" width="71.72%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1850335914303">Name of the schema to which the policy applies. The value <strong id="mrs_01_1862__en-us_topic_0000001173630648_b12680194812274">*</strong> indicates all schemas.</p>
<ul id="mrs_01_1862__en-us_topic_0000001173630648_ul62328268386"><li id="mrs_01_1862__en-us_topic_0000001173630648_li18232142643816"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b1615416468385">Include</strong>: The policy applies to the current input object.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li7232426173812"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b1598347183817">Exclude</strong>: The policy applies to objects other than the current input.</li></ul>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row18304133403012"><td class="cellrowborder" valign="top" width="28.28%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p5304134113010">table</p>
</td>
<td class="cellrowborder" valign="top" width="71.72%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p101504517315">Name of the table or view to which the policy applies. If this parameter is set to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1930934410304">*</strong>, the policy applies to all tables.</p>
<ul id="mrs_01_1862__en-us_topic_0000001173630648_ul211881163916"><li id="mrs_01_1862__en-us_topic_0000001173630648_li15118518392"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b1038015506381">Include</strong>: The policy applies to the current input object.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1811819163914"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b18350125211385">Exclude</strong>: The policy applies to objects other than the current input.</li></ul>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row43041334133011"><td class="cellrowborder" valign="top" width="28.28%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p155351440143214">Column</p>
</td>
<td class="cellrowborder" valign="top" width="71.72%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1453514405325">Name of the column to which the policy applies. The value <strong id="mrs_01_1862__en-us_topic_0000001173630648_b13228155814346">*</strong> indicates all columns.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row12005455266"><td class="cellrowborder" valign="top" width="28.28%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p720084542618">Description</p>
</td>
<td class="cellrowborder" valign="top" width="71.72%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1869773261914">Policy description.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row1820020458263"><td class="cellrowborder" valign="top" width="28.28%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p3200134512619">Audit Logging</p>
</td>
<td class="cellrowborder" valign="top" width="71.72%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p18988437174719">Whether to audit the policy.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row1236913288272"><td class="cellrowborder" valign="top" width="28.28%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p5283112333812">Allow Conditions</p>
</td>
<td class="cellrowborder" valign="top" width="71.72%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p2150185173119">Policy allowed condition. You can configure permissions and exceptions allowed by the policy.</p>
<p id="mrs_01_1862__en-us_topic_0000001173630648_p3943134320378">In the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1488519833519">Select Role</strong>, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b8892178113513">Select Group</strong>, and <strong id="mrs_01_1862__en-us_topic_0000001173630648_b6893483353">Select User</strong> columns, select the role, user group, or user to which you want to assign permissions. Click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b3319175514177">Add Conditions</strong>, add the IP address range to which the policy applies, and click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b83241555101717">Add Permissions</strong> to add corresponding permissions.</p>
<ul id="mrs_01_1862__en-us_topic_0000001173630648_ul615075143113"><li id="mrs_01_1862__en-us_topic_0000001173630648_li15150195113117"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b160135017366">Select</strong>: permission to query data</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li171501451193115"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b3834104482810">Insert</strong>: permission to insert data</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li7150851193114"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b175448265399">Create</strong>: permission to create data</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li21501451173117"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b0427936203917">Drop</strong>: permission to drop data</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li79045210474"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b75151456144019">Delete</strong>: permission to delete data</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li815015515316"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b199364319411">Use</strong>: permission to use data</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1015019513318"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b2384643164111">Alter</strong>: permission to alter data</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1932641010"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b2299321072">Update</strong>: permission to update data</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li141505516317"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b1060905264113">Admin</strong>: admin permissions (control ACL operations, such as <strong id="mrs_01_1862__en-us_topic_0000001173630648_b620134184216">SET SESSION</strong>, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b760958104217">GRANT</strong>, and <strong id="mrs_01_1862__en-us_topic_0000001173630648_b17439511134210">REVOKE</strong>)</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li121505513318"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b18791220164218">All</strong>: all permissions (including the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1589042994213">Admin</strong> permission)</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1663701573417"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b974310319239">Select/Deselect All</strong>: Select or deselect all.</li></ul>
<p id="mrs_01_1862__en-us_topic_0000001173630648_p1545113122150">To add multiple permission control rules, click <span><img id="mrs_01_1862__en-us_topic_0000001173630648_image341133521514" src="en-us_image_0000001295740312.png"></span>.</p>
<p id="mrs_01_1862__en-us_topic_0000001173630648_p8404164411">If users or user groups in the current condition need to manage this policy, select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b482458429">Delegate Admin</strong>. These users will become the agent administrators. The agent administrators can update and delete this policy and create sub-policies based on the original policy.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row33701328122711"><td class="cellrowborder" valign="top" width="28.28%" headers="mcps1.3.3.2.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p8283623173816">Deny Conditions</p>
</td>
<td class="cellrowborder" valign="top" width="71.72%" headers="mcps1.3.3.2.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p6283423103817">Policy rejection condition, which is used to configure the permissions and exceptions to be denied in the policy. The configuration method is the same as that of <strong id="mrs_01_1862__en-us_topic_0000001173630648_b11134184164611">Allow Conditions</strong>.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="mrs_01_1862__en-us_topic_0000001173630648_table1442616441114" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Setting permissions</caption><thead align="left"><tr id="mrs_01_1862__en-us_topic_0000001173630648_row1542654411111"><th align="left" class="cellrowborder" valign="top" width="29.32%" id="mcps1.3.3.2.3.2.2.2.3.1.1"><p id="mrs_01_1862__en-us_topic_0000001173630648_p18426144418">Task</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="70.67999999999999%" id="mcps1.3.3.2.3.2.2.2.3.1.2"><p id="mrs_01_1862__en-us_topic_0000001173630648_p18426174415111">Role Authorization</p>
</th>
</tr>
</thead>
<tbody><tr id="mrs_01_1862__en-us_topic_0000001173630648_row18426244514"><td class="cellrowborder" valign="top" width="29.32%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p19426114414115">Granting the access policy to the catalog where the table is located</p>
</td>
<td class="cellrowborder" valign="top" width="70.67999999999999%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><ol type="a" id="mrs_01_1862__en-us_topic_0000001173630648_ol166443716135"><li id="mrs_01_1862__en-us_topic_0000001173630648_li2664173715138">Enter the policy name in <strong id="mrs_01_1862__en-us_topic_0000001173630648_b674483494613">Policy Name</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li166423718132">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b9923103615472">Presto Catalog</strong>, enter the catalog of the resource to be authorized, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1752114720471">hive</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li5664173741319">Enter the authorized Hetu user in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b16815919493">Select User</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li146646372134">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b78849955013">Permissions</strong>, select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b085331745010">Select</strong>.</li></ol>
<div class="note" id="mrs_01_1862__en-us_topic_0000001173630648_note9160175944514"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="mrs_01_1862__en-us_topic_0000001173630648_p14160115912457">This policy is a basic policy. Before configuring other policies, ensure that this policy has been configured.</p>
</div></div>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row2426344714"><td class="cellrowborder" valign="top" width="29.32%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1242612441218">Granting the permission to access the remote <span id="mrs_01_1862__en-us_topic_0000001173630648_text69582193219">HetuEngine</span> table</p>
</td>
<td class="cellrowborder" valign="top" width="70.67999999999999%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><ol type="a" id="mrs_01_1862__en-us_topic_0000001173630648_ol185036380182"><li id="mrs_01_1862__en-us_topic_0000001173630648_li450343841816">Enter the policy name in <strong id="mrs_01_1862__en-us_topic_0000001173630648_b762414114558">Policy Name</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li8503938171815">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b29714371908">Presto Catalog</strong>, enter the catalog of the table to be authorized, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b11033372011">systemremote</strong> and <strong id="mrs_01_1862__en-us_topic_0000001173630648_b16877258195611">svc</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li65034383187">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b2083420160574">schema</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1834181615714">Presto Catalog</strong> and enter <strong id="mrs_01_1862__en-us_topic_0000001173630648_b198351316155715">*</strong> in the text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li15503143816182">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b473915611512">table</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b11189111110618">schema</strong> and enter <strong id="mrs_01_1862__en-us_topic_0000001173630648_b10745185612513">*</strong> in the text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li450323816181">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b4610151161316">column</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b26161511111318">table</strong> and enter <strong id="mrs_01_1862__en-us_topic_0000001173630648_b186171211201319">*</strong> in the text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1450343813181">Enter the authorized remote HetuEngine user in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b25001349185712">Select User</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li35031938181811">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b4888195105816">Permissions</strong>, select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b94731292588">Create</strong>, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b6261111205816">Drop</strong>, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b0288121218581">Select</strong>, and <strong id="mrs_01_1862__en-us_topic_0000001173630648_b10612513125820">Insert</strong>.</li></ol>
<div class="note" id="mrs_01_1862__en-us_topic_0000001173630648_note182221925141713"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="mrs_01_1862__en-us_topic_0000001173630648_p53811556453">This policy is a basic policy for remote HetuEngine tables. Before configuring other policies, ensure that this policy has been configured.</p>
</div></div>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row1442618441612"><td class="cellrowborder" valign="top" width="29.32%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p13426144411119">Create schemas</p>
</td>
<td class="cellrowborder" valign="top" width="70.67999999999999%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><ol type="a" id="mrs_01_1862__en-us_topic_0000001173630648_ol4397134432420"><li id="mrs_01_1862__en-us_topic_0000001173630648_li1397134411245">Enter the policy name in <strong id="mrs_01_1862__en-us_topic_0000001173630648_b580695121319">Policy Name</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li103971144112414">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b78761755121318">Presto Catalog</strong>, enter the catalog of the target table to be authorized, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b10882205516138">hive</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1539764410248">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b173341157146">schema</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b83401155144">Presto Catalog</strong> and enter the name of the target schema to be authorized in the text box. If this parameter is set to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b6207218168">*</strong>, all schemas under the current catalog are authorized.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li16397044192416">Enter the authorized Hetu user in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b13434132651614">Select User</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li10397194472420">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b849213920169">Permissions</strong>, select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b94983398161">Create</strong>.</li></ol>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row1042610441418"><td class="cellrowborder" valign="top" width="29.32%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1342614447115">Drop schemas</p>
</td>
<td class="cellrowborder" valign="top" width="70.67999999999999%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><ol type="a" id="mrs_01_1862__en-us_topic_0000001173630648_ol152942202374"><li id="mrs_01_1862__en-us_topic_0000001173630648_li129412207375">Enter the policy name in <strong id="mrs_01_1862__en-us_topic_0000001173630648_b11557125271616">Policy Name</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1229462083710">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b12408054151614">Presto Catalog</strong>, enter the catalog of the target table to be authorized, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b140916547168">hive</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li129492012371">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b948275891616">schema</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1548814588168">Presto Catalog</strong> and enter the name of the target schema to be authorized in the text box. If this parameter is set to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b96201671712">*</strong>, all schemas under the current catalog are authorized.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li3294220143714">Enter the authorized Hetu user in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b14579244179">Select User</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li4294220173713">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b44079288173">Permissions</strong>, select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b141332841710">Drop</strong>.</li></ol>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row142614441319"><td class="cellrowborder" valign="top" width="29.32%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p942664419115">Create table</p>
</td>
<td class="cellrowborder" valign="top" width="70.67999999999999%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><ol type="a" id="mrs_01_1862__en-us_topic_0000001173630648_ol1972625253813"><li id="mrs_01_1862__en-us_topic_0000001173630648_li14726452113812">Enter the policy name in <strong id="mrs_01_1862__en-us_topic_0000001173630648_b11809113819174">Policy Name</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li372655219387">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1929640181719">Presto Catalog</strong>, enter the catalog of the target table to be authorized, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1430154011173">hive</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li37261252203814">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b19637134331713">schema</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b864324361716">Presto Catalog</strong> and enter the name of the schema where the target table to be authorized resides in the text box, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b116021135193714">default</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li137269525383">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1746864101811">table</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b94741412189">schema</strong> and enter the name of the target table to be authorized in the text box. If this parameter is set to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1532283818208">*</strong>, all tables under the current schema are authorized.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li20726352123819">Enter the authorized Hetu user in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b2029485413201">Select User</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1272611524388">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b29009579201">Permissions</strong>, select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1790655720209">Create</strong>.</li></ol>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row742664418112"><td class="cellrowborder" valign="top" width="29.32%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1242616442116">Drop tables</p>
</td>
<td class="cellrowborder" valign="top" width="70.67999999999999%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><ol type="a" id="mrs_01_1862__en-us_topic_0000001173630648_ol37881650113913"><li id="mrs_01_1862__en-us_topic_0000001173630648_li278815015397">Enter the policy name in <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1011711610216">Policy Name</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li157886506396">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b7567177182119">Presto Catalog</strong>, enter the catalog of the target table to be authorized, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b756917713219">hive</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li47882505399">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b15949209172120">schema</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b179501393214">Presto Catalog</strong> and enter the name of the schema where the target table to be authorized resides in the text box, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b2062141443810">default</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li87881850143913">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b4891192014210">table</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1089892052117">schema</strong> and enter the name of the target table to be authorized in the text box. If this parameter is set to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b797873982114">*</strong>, all tables under the current schema are authorized.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1478819500398">Enter the authorized Hetu user in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b11884184310216">Select User</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li67882506395">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b449134811218">Permissions</strong>, select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1655144819213">Drop</strong>.</li></ol>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row1842684415111"><td class="cellrowborder" valign="top" width="29.32%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p24268448118">Alter tables</p>
</td>
<td class="cellrowborder" valign="top" width="70.67999999999999%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><ol type="a" id="mrs_01_1862__en-us_topic_0000001173630648_ol894833744018"><li id="mrs_01_1862__en-us_topic_0000001173630648_li20948163784012">Enter the policy name in <strong id="mrs_01_1862__en-us_topic_0000001173630648_b289705562117">Policy Name</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li3948937154018">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b23243571215">Presto Catalog</strong>, enter the catalog of the target table to be authorized, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b19325557122114">hive</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li17948193734018">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b5269133618162">schema</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b626943618162">Presto Catalog</strong> and enter the name of the schema where the target table to be authorized resides in the text box, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1226973610166">default</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1694803711401">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b469502210236">table</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b14701132211238">schema</strong> and enter the name of the target table to be authorized in the text box. If this parameter is set to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b177271568246">*</strong>, all tables under the current schema are authorized.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li189496376403">Enter the authorized Hetu user in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b204139152414">Select User</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li0949153754013">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b993918135243">Permissions</strong>, select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1994571302417">Alter</strong>.</li></ol>
<div class="note" id="mrs_01_1862__en-us_topic_0000001173630648_note12648359194719"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="mrs_01_1862__en-us_topic_0000001173630648_p3648185917476"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b4303193116417">ALTER TABLE table_name DROP [IF EXISTS] PARTITION partition_spec[, PARTITION partition_spec, ...];</strong> requires the table-level <strong id="mrs_01_1862__en-us_topic_0000001173630648_b55042022134218">delete</strong> and column-level <strong id="mrs_01_1862__en-us_topic_0000001173630648_b444813264216">select</strong> permissions.</p>
</div></div>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row114101341065"><td class="cellrowborder" valign="top" width="29.32%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p84108418610">Show tables</p>
</td>
<td class="cellrowborder" valign="top" width="70.67999999999999%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><ol type="a" id="mrs_01_1862__en-us_topic_0000001173630648_ol5370142917416"><li id="mrs_01_1862__en-us_topic_0000001173630648_li7370162915415">Enter the policy name in <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1425982452419">Policy Name</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li13702292411">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b9476172792410">Presto Catalog</strong>, enter the catalog of the target table to be authorized, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b94772027152412">hive</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li3371122919412">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b657294832411">schema</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b557814815249">Presto Catalog</strong> and enter the name of the target schema that allows to show table in the text box, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b18021912162518">default</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li037152954118">Enter the authorized Hetu user in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b6958103914256">Select User</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li2371729114112">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1084845592518">Permissions</strong>, select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b485635513252">Select</strong>.</li></ol>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row114101741865"><td class="cellrowborder" valign="top" width="29.32%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p164109417619">Insert tables</p>
</td>
<td class="cellrowborder" valign="top" width="70.67999999999999%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><ol type="a" id="mrs_01_1862__en-us_topic_0000001173630648_ol191011329441"><li id="mrs_01_1862__en-us_topic_0000001173630648_li591093215447">Enter the policy name in <strong id="mrs_01_1862__en-us_topic_0000001173630648_b558613322815">Policy Name</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li19910173254410">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1599915482817">Presto Catalog</strong>, enter the catalog of the target table to be authorized, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b60653287">hive</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li291003219446">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b68531713162817">schema</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b38591513122816">Presto Catalog</strong> and enter the name of the schema where the target table to be authorized resides in the text box, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1162016415">default</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li39101832124414">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b198271123162812">table</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1783212372811">schema</strong> and enter the name of the target table to be authorized in the text box. If this parameter is set to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b17819182992820">*</strong>, all tables under the current schema are authorized.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1910203215448">Enter the authorized Hetu user in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b14169153502819">Select User</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li79101732154410">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b7971173972813">Permissions</strong>, select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b209773397284">Insert</strong>.</li></ol>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row04102411562"><td class="cellrowborder" valign="top" width="29.32%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p3410174118612">Delete</p>
</td>
<td class="cellrowborder" valign="top" width="70.67999999999999%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><ol type="a" id="mrs_01_1862__en-us_topic_0000001173630648_ol1620562614452"><li id="mrs_01_1862__en-us_topic_0000001173630648_li1205202617451">Enter the policy name in <strong id="mrs_01_1862__en-us_topic_0000001173630648_b2031711542914">Policy Name</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li4205192644510">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1514519179293">Presto Catalog</strong>, enter the catalog of the target table to be authorized, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b714613175297">hive</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li320552624519">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b167713563388">schema</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b7773135663811">Presto Catalog</strong> and enter the name of the schema where the target table to be authorized resides in the text box, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1077535614383">default</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li202051826124510">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b8188726132913">table</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b161941626182920">schema</strong> and enter the name of the target table to be authorized in the text box. If this parameter is set to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1742123317297">*</strong>, all tables under the current schema are authorized.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li320572684511">Enter the authorized Hetu user in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b12222735182911">Select User</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li820532616457">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1588483862913">Permissions</strong>, select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1588514389299">Delete</strong>.</li></ol>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row1441013411366"><td class="cellrowborder" valign="top" width="29.32%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p18411154117620">Select</p>
</td>
<td class="cellrowborder" valign="top" width="70.67999999999999%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><ol type="a" id="mrs_01_1862__en-us_topic_0000001173630648_ol1941401954618"><li id="mrs_01_1862__en-us_topic_0000001173630648_li24141219134615">Enter the policy name in <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1983774992910">Policy Name</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li10414719144613">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1826325111294">Presto Catalog</strong>, enter the catalog of the target table to be authorized, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b14263351162913">hive</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li941431944615">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b13870145312299">schema</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b158711953162920">Presto Catalog</strong> and enter the name of the schema where the target table to be authorized resides in the text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li10414171944614">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b469225992914">table</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b56982059152913">schema</strong> and enter the name of the target table to be authorized in the text box. If this parameter is set to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b11750176143011">*</strong>, all tables under the current schema are authorized.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1414191904610">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b20183141033017">column</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b718411011309">table</strong> and enter the name of the target column to be authorized in the text box. If this parameter is set to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b953245163012">*</strong>, all columns under the current table are authorized.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li141421911464">Enter the authorized Hetu user in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b75611057143016">Select User</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1941481911466">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b920635914306">Permissions</strong>, select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b5207195933010">Select</strong>.</li></ol>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row58401199719"><td class="cellrowborder" valign="top" width="29.32%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p58402191719">Show columns</p>
</td>
<td class="cellrowborder" valign="top" width="70.67999999999999%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><ol type="a" id="mrs_01_1862__en-us_topic_0000001173630648_ol1060214280476"><li id="mrs_01_1862__en-us_topic_0000001173630648_li2602142854720">Enter the policy name in <strong id="mrs_01_1862__en-us_topic_0000001173630648_b8712142317">Policy Name</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li4602142864712">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b24431714316">Presto Catalog</strong>, enter the catalog of the target table to be authorized, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b244437203113">hive</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li136021828104719">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b524081393115">schema</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b22462132319">Presto Catalog</strong> and enter the name of the schema where the target table to be authorized resides in the text box, for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b9116513153913">default</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li46035283473">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b17983192073114">table</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1998932015319">schema</strong> and enter the name of the target table to be authorized in the text box. If this parameter is set to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1435613256310">*</strong>, all tables under the current schema are authorized.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1960372810475">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b101081129153113">column</strong> from the drop-down list box under <strong id="mrs_01_1862__en-us_topic_0000001173630648_b12114112918313">table</strong> and enter the name of the target column to be authorized in the text box. If this parameter is set to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b14829103316312">*</strong>, all columns under the current table are authorized.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li8603142834715">Enter the authorized Hetu user in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b17734103514319">Select User</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1660302874715">In <strong id="mrs_01_1862__en-us_topic_0000001173630648_b10489048113112">Permissions</strong>, select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b174954488314">Select</strong>.</li></ol>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row1984016191371"><td class="cellrowborder" valign="top" width="29.32%" headers="mcps1.3.3.2.3.2.2.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p168404191073">Set sessions</p>
</td>
<td class="cellrowborder" valign="top" width="70.67999999999999%" headers="mcps1.3.3.2.3.2.2.2.3.1.2 "><ol type="a" id="mrs_01_1862__en-us_topic_0000001173630648_ol1738683155115"><li id="mrs_01_1862__en-us_topic_0000001173630648_li7387113135113">Enter the policy name in <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1711212542313">Policy Name</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li123871315512">Enter <strong id="mrs_01_1862__en-us_topic_0000001173630648_b54068933214">*</strong> in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b410861710324">Presto Catalog</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1638712375112">Enter the authorized Hetu user in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b284221817322">Select User</strong> text box.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li44343129143">Select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b18212192518299">Delegate Admin</strong>.</li></ol>
</td>
</tr>
</tbody>
</table>
</div>
<div class="note" id="mrs_01_1862__en-us_topic_0000001173630648_note2630256673"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="mrs_01_1862__en-us_topic_0000001173630648_ul54291521388"><li id="mrs_01_1862__en-us_topic_0000001173630648_li243014210814">The configuration takes effect about 30 seconds after the permission is configured.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li194304210813">The current permission control is available to columns.</li></ul>
</div></div>
</p></li><li id="mrs_01_1862__en-us_topic_0000001173630648_li1171204215226"><span>(Optional) Add the validity period of the policy. Click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b13391174012331">Add Validity period</strong> in the upper right corner of the page, set <strong id="mrs_01_1862__en-us_topic_0000001173630648_b4399740143312">Start Time</strong> and <strong id="mrs_01_1862__en-us_topic_0000001173630648_b54001140113316">End Time</strong>, and select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b144023407336">Time Zone</strong>. Click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b62671845103311">Save</strong>. To add multiple policy validity periods, click <span><img id="mrs_01_1862__en-us_topic_0000001173630648_en-us_topic_0241932507_image15741956174617" src="en-us_image_0000001295740308.png"></span>. To delete a policy validity period, click <span><img id="mrs_01_1862__en-us_topic_0000001173630648_en-us_topic_0241932507_image9741115619467" src="en-us_image_0000001349259409.png"></span>.</span></li><li id="mrs_01_1862__en-us_topic_0000001173630648_li18337132412418"><span>Click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b7802125813317">Add</strong> to view the basic information about the policy in the policy list. After the policy takes effect, check whether the related permissions are normal.</span><p><p id="mrs_01_1862__en-us_topic_0000001173630648_en-us_topic_0241932507_p63219632216">To disable a policy, click <span><img id="mrs_01_1862__en-us_topic_0000001173630648_en-us_topic_0241932507_image1876104732217" src="en-us_image_0000001296219740.png"></span> to edit the policy and set the policy to <strong id="mrs_01_1862__en-us_topic_0000001173630648_b177564461594">Disabled</strong>.</p>
<p id="mrs_01_1862__en-us_topic_0000001173630648_en-us_topic_0241932507_p1156483182316">If a policy is no longer used, click <span><img id="mrs_01_1862__en-us_topic_0000001173630648_en-us_topic_0241932507_image79841567249" src="en-us_image_0000001348740141.png"></span> to delete it.</p>
</p></li></ol>
</div>
<div class="section" id="mrs_01_1862__en-us_topic_0000001173630648_section67107593567"><h4 class="sectiontitle"><span id="mrs_01_1862__en-us_topic_0000001173630648_text9138751195712">HetuEngine</span> Data Masking</h4><p id="mrs_01_1862__en-us_topic_0000001173630648_p3789205973315">Ranger supports data masking for <span id="mrs_01_1862__en-us_topic_0000001173630648_text17933657205716">HetuEngine</span> data. It can process the return result of the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b6872349170">select</strong> operation performed by a user to mask sensitive information.</p>
<ol id="mrs_01_1862__en-us_topic_0000001173630648_ol14761626161412"><li id="mrs_01_1862__en-us_topic_0000001173630648_li37692620143"><span>Log in to the Ranger web UI. Click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1404431356">HetuEngine</strong> in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b815211526">PRESTO</strong> area on the homepage.</span></li><li id="mrs_01_1862__en-us_topic_0000001173630648_li176626161415"><span>On the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b936607559348">Masking</strong> tab page, click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1445160165348">Add New Policy</strong> to add a <span id="mrs_01_1862__en-us_topic_0000001173630648_text1729415425218">HetuEngine</span> data masking policy.</span></li><li id="mrs_01_1862__en-us_topic_0000001173630648_li6626120121517"><span>Configure the parameters listed in the table below based on the service demands.</span><p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="mrs_01_1862__en-us_topic_0000001173630648_table1491812011519" frame="border" border="1" rules="all"><caption><b>Table 3 </b><span id="mrs_01_1862__en-us_topic_0000001173630648_text1588572914310">HetuEngine</span> data masking parameters</caption><thead align="left"><tr id="mrs_01_1862__en-us_topic_0000001173630648_row3918520101513"><th align="left" class="cellrowborder" valign="top" width="19.11%" id="mcps1.3.4.3.3.2.1.2.3.1.1"><p id="mrs_01_1862__en-us_topic_0000001173630648_p1391862041510">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="80.89%" id="mcps1.3.4.3.3.2.1.2.3.1.2"><p id="mrs_01_1862__en-us_topic_0000001173630648_p20918202018155">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="mrs_01_1862__en-us_topic_0000001173630648_row1991814204152"><td class="cellrowborder" valign="top" width="19.11%" headers="mcps1.3.4.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p2918132081514">Policy Name</p>
</td>
<td class="cellrowborder" valign="top" width="80.89%" headers="mcps1.3.4.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p5255520152515">Policy name, which can be customized and must be unique in the service.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row11461825181517"><td class="cellrowborder" valign="top" width="19.11%" headers="mcps1.3.4.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p199210414156">Policy Conditions</p>
</td>
<td class="cellrowborder" valign="top" width="80.89%" headers="mcps1.3.4.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p692164120156">IP address filtering policy, which can be customized. You can enter one or more IP addresses or IP address segments. The IP address can contain the wildcard character (*), for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1749419313189">192.168.1.10</strong>,<strong id="mrs_01_1862__en-us_topic_0000001173630648_b16499113151813">192.168.1.20</strong>, or <strong id="mrs_01_1862__en-us_topic_0000001173630648_b6499123151817">192.168.1.*</strong>.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row19412189191"><td class="cellrowborder" valign="top" width="19.11%" headers="mcps1.3.4.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p17135151110915">Policy Label</p>
</td>
<td class="cellrowborder" valign="top" width="80.89%" headers="mcps1.3.4.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p513517117917">A label specified for the current policy. You can search for reports and filter policies based on labels.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row76611431456"><td class="cellrowborder" valign="top" width="19.11%" headers="mcps1.3.4.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p466213958">Presto Catalog</p>
</td>
<td class="cellrowborder" valign="top" width="80.89%" headers="mcps1.3.4.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p766211310512">Name of the catalog to which the current policy applies.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row149181120191510"><td class="cellrowborder" valign="top" width="19.11%" headers="mcps1.3.4.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1891982012151">Presto Schema</p>
</td>
<td class="cellrowborder" valign="top" width="80.89%" headers="mcps1.3.4.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1791982021512">Name of the database to which the current policy applies.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row1791952061519"><td class="cellrowborder" valign="top" width="19.11%" headers="mcps1.3.4.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p191920207151">Presto Table</p>
</td>
<td class="cellrowborder" valign="top" width="80.89%" headers="mcps1.3.4.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p6919192011151">Name of the table to which the current policy applies.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row19919120171511"><td class="cellrowborder" valign="top" width="19.11%" headers="mcps1.3.4.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p89197208154">Presto Column</p>
</td>
<td class="cellrowborder" valign="top" width="80.89%" headers="mcps1.3.4.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p18919720111520">Name of the column to which the current policy applies.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row15781105116259"><td class="cellrowborder" valign="top" width="19.11%" headers="mcps1.3.4.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p6553553192517">Description</p>
</td>
<td class="cellrowborder" valign="top" width="80.89%" headers="mcps1.3.4.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p75531053202512">Policy description.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row391952071518"><td class="cellrowborder" valign="top" width="19.11%" headers="mcps1.3.4.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p255305315254">Audit Logging</p>
</td>
<td class="cellrowborder" valign="top" width="80.89%" headers="mcps1.3.4.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p175531753112510">Whether to audit the policy.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row9919192017152"><td class="cellrowborder" valign="top" width="19.11%" headers="mcps1.3.4.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1691914209154">Mask Conditions</p>
</td>
<td class="cellrowborder" valign="top" width="80.89%" headers="mcps1.3.4.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p20919320131514">In the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b42775353184">Select Role</strong>, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1328293515189">Select Group</strong>, and <strong id="mrs_01_1862__en-us_topic_0000001173630648_b7282143510184">Select User</strong> columns, select the object to which the permission is to be granted, click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b172821135161820">Add Conditions</strong>, add the IP address range to which the policy applies, then click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1428213511186">Add Permissions</strong>, and select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1128315352180">Select</strong>.</p>
<p id="mrs_01_1862__en-us_topic_0000001173630648_p699541513175">Click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b737442238348">Select Masking Option</strong> and select a data masking policy.</p>
<ul id="mrs_01_1862__en-us_topic_0000001173630648_ul16919420131516"><li id="mrs_01_1862__en-us_topic_0000001173630648_li69191820181516"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b355071612912">Redact</strong>: Use <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1982377322348">x</strong> to mask all letters and <strong id="mrs_01_1862__b125169468415">0</strong> to mask all digits.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li17919182071514"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b91512261196">Partial mask: show last 4</strong>: Only the last four characters are displayed, and the rest characters are displayed using <strong id="mrs_01_1862__en-us_topic_0000001173630648_b109862749348">x</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li2919192091520"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b16633183216919">Partial mask: show first 4</strong>: Only the first four characters are displayed, and the rest characters are displayed using <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1956530995348">x</strong>.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li591922019159"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b14231436590">Hash</strong>: Replace the original value with the hash value.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li18919192013156"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b578815388916">Nullify</strong>: Replace the original value with the NULL value.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li39190202151"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b01531431291">Unmasked (retain original value)</strong>: Keep the original value.</li><li id="mrs_01_1862__en-us_topic_0000001173630648_li13919182021516"><strong id="mrs_01_1862__en-us_topic_0000001173630648_b165018531990">Custom</strong>: You customize policies using any valid return data type which is the same as the data type in the masked column.</li></ul>
<p id="mrs_01_1862__en-us_topic_0000001173630648_p17919420191510">To add a multi-column masking policy, click <span><img id="mrs_01_1862__en-us_topic_0000001173630648_image139191520151519" src="en-us_image_0000001349059961.png"></span>.</p>
</td>
</tr>
</tbody>
</table>
</div>
</p></li><li id="mrs_01_1862__en-us_topic_0000001173630648_li215401516232"><span>Click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1289031250">Add</strong> to view the basic information about the policy in the policy list.</span></li><li id="mrs_01_1862__en-us_topic_0000001173630648_li2246435202617"><span>After a user performs the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b323416511106">select </strong>operation on a table for which a data masking policy has been configured on a <span id="mrs_01_1862__en-us_topic_0000001173630648_text1210816351584">HetuEngine</span> client, the system processes the data and displays it.</span></li></ol>
</div>
<div class="section" id="mrs_01_1862__en-us_topic_0000001173630648_section1045222085712"><h4 class="sectiontitle"><span id="mrs_01_1862__en-us_topic_0000001173630648_text8161134011585">HetuEngine</span> Row-level Data Filtering</h4><p id="mrs_01_1862__en-us_topic_0000001173630648_p1631710378412">Ranger allows you to filter data at the row level when you perform the select operation on a <span id="mrs_01_1862__en-us_topic_0000001173630648_text1233054685813">HetuEngine</span> data table.</p>
<ol id="mrs_01_1862__en-us_topic_0000001173630648_ol147024123710"><li id="mrs_01_1862__en-us_topic_0000001173630648_li1170251218717"><span>Log in to the Ranger web UI. Click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b339222258">HetuEngine</strong> in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b627234288">PRESTO</strong> area on the homepage.</span></li><li id="mrs_01_1862__en-us_topic_0000001173630648_li370281216712"><span>On the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1083722948348">Row Level Filter</strong> tab page, click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1807150779348">Add New Policy</strong> to add a row data filtering policy.</span></li><li id="mrs_01_1862__en-us_topic_0000001173630648_li6702171214720"><span>Configure the parameters listed in the table below based on the service demands.</span><p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="mrs_01_1862__en-us_topic_0000001173630648_table1702201213710" frame="border" border="1" rules="all"><caption><b>Table 4 </b>Parameters for filtering HetuEngine row data</caption><thead align="left"><tr id="mrs_01_1862__en-us_topic_0000001173630648_row1470213121177"><th align="left" class="cellrowborder" valign="top" width="22.45%" id="mcps1.3.5.3.3.2.1.2.3.1.1"><p id="mrs_01_1862__en-us_topic_0000001173630648_p670217121076">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="77.55%" id="mcps1.3.5.3.3.2.1.2.3.1.2"><p id="mrs_01_1862__en-us_topic_0000001173630648_p87021612578">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="mrs_01_1862__en-us_topic_0000001173630648_row0702212776"><td class="cellrowborder" valign="top" width="22.45%" headers="mcps1.3.5.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p107024123717">Policy Name</p>
</td>
<td class="cellrowborder" valign="top" width="77.55%" headers="mcps1.3.5.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p20703912179">Policy name, which can be customized and must be unique in the service.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row169621617171819"><td class="cellrowborder" valign="top" width="22.45%" headers="mcps1.3.5.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p4307132571818">Policy Conditions</p>
</td>
<td class="cellrowborder" valign="top" width="77.55%" headers="mcps1.3.5.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p16307172521816">IP address filtering policy, which can be customized. You can enter one or more IP addresses or IP address segments. The IP address can contain the wildcard character (*), for example, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b97652386183">192.168.1.10</strong>,<strong id="mrs_01_1862__en-us_topic_0000001173630648_b9770638191814">192.168.1.20</strong>, or <strong id="mrs_01_1862__en-us_topic_0000001173630648_b4770193815186">192.168.1.*</strong>.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row13855184111911"><td class="cellrowborder" valign="top" width="22.45%" headers="mcps1.3.5.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1770311427911">Policy Label</p>
</td>
<td class="cellrowborder" valign="top" width="77.55%" headers="mcps1.3.5.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p12703144211912">A label specified for the current policy. You can search for reports and filter policies based on labels.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row582163310159"><td class="cellrowborder" valign="top" width="22.45%" headers="mcps1.3.5.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p470593513151">Presto Catalog</p>
</td>
<td class="cellrowborder" valign="top" width="77.55%" headers="mcps1.3.5.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p137054353156">Name of the catalog to which the current policy applies.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row1870313121875"><td class="cellrowborder" valign="top" width="22.45%" headers="mcps1.3.5.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p67038121179">Presto Schema</p>
</td>
<td class="cellrowborder" valign="top" width="77.55%" headers="mcps1.3.5.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1070312121374">Name of the database to which the current policy applies.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row1870310124719"><td class="cellrowborder" valign="top" width="22.45%" headers="mcps1.3.5.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p5703212976">Presto Table</p>
</td>
<td class="cellrowborder" valign="top" width="77.55%" headers="mcps1.3.5.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p15703512375">Name of the table to which the current policy applies.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row6703121211712"><td class="cellrowborder" valign="top" width="22.45%" headers="mcps1.3.5.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p5703191217719">Description</p>
</td>
<td class="cellrowborder" valign="top" width="77.55%" headers="mcps1.3.5.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p37036121574">Policy description.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row1470315123717"><td class="cellrowborder" valign="top" width="22.45%" headers="mcps1.3.5.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1670319122072">Audit Logging</p>
</td>
<td class="cellrowborder" valign="top" width="77.55%" headers="mcps1.3.5.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1670312128718">Whether to audit the policy.</p>
</td>
</tr>
<tr id="mrs_01_1862__en-us_topic_0000001173630648_row12703912273"><td class="cellrowborder" valign="top" width="22.45%" headers="mcps1.3.5.3.3.2.1.2.3.1.1 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p127039121176">Row Filter Conditions</p>
</td>
<td class="cellrowborder" valign="top" width="77.55%" headers="mcps1.3.5.3.3.2.1.2.3.1.2 "><p id="mrs_01_1862__en-us_topic_0000001173630648_p1670316121671">In the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b11981103815184">Select Role</strong>, <strong id="mrs_01_1862__en-us_topic_0000001173630648_b8982123861819">Select Group</strong>, and <strong id="mrs_01_1862__en-us_topic_0000001173630648_b129821338171819">Select User</strong> columns, select the object to which the permission is to be granted, click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b4982143810182">Add Conditions</strong>, add the IP address range to which the policy applies, then click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1398203819189">Add Permissions</strong>, and select <strong id="mrs_01_1862__en-us_topic_0000001173630648_b189826381186">Select</strong>.</p>
<p id="mrs_01_1862__en-us_topic_0000001173630648_p270391213720">Click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b281833124348">Row Level Filter</strong> and enter data filtering rules.</p>
<p id="mrs_01_1862__en-us_topic_0000001173630648_p10682174391411">For example, if you want to filter the data in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b510734918348">zhangsan</strong> row in the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1561734121348">name</strong> column of <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1475451196348">table A</strong>, the filtering rule is <strong id="mrs_01_1862__en-us_topic_0000001173630648_b1452134236348">name &lt;&gt;'zhangsan'</strong>. For more information, see the official Ranger document.</p>
<p id="mrs_01_1862__en-us_topic_0000001173630648_p2070316121671">To add more rules, click <span><img id="mrs_01_1862__en-us_topic_0000001173630648_image11703141212710" src="en-us_image_0000001295900272.png"></span>.</p>
</td>
</tr>
</tbody>
</table>
</div>
</p></li><li id="mrs_01_1862__en-us_topic_0000001173630648_li2703212975"><span>Click <strong id="mrs_01_1862__en-us_topic_0000001173630648_b143426501">Add</strong> to view the basic information about the policy in the policy list.</span></li><li id="mrs_01_1862__en-us_topic_0000001173630648_li6703181214713"><span>After a user performs the <strong id="mrs_01_1862__en-us_topic_0000001173630648_b15436163123119">select </strong>operation on a table for which a data masking policy has been configured on a <span id="mrs_01_1862__en-us_topic_0000001173630648_text18441163103118">HetuEngine</span> client, the system processes the data and displays it.</span></li></ol>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="mrs_01_1849.html">Using Ranger</a></div>
</div>
</div>
View Git Blame Copy Permalink