forked from docs/doc-exports
Yang, Tong
6182f91ba8
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-authored-by: Yang, Tong <yangtong2@huawei.com> Co-committed-by: Yang, Tong <yangtong2@huawei.com>
24 lines
3.1 KiB
HTML
24 lines
3.1 KiB
HTML
<a name="mrs_01_1657"></a><a name="mrs_01_1657"></a>
|
|
|
|
<h1 class="topictitle1">Insufficient Rights When a Tenant Accesses Phoenix</h1>
|
|
<div id="body1596003895091"><div class="section" id="mrs_01_1657__s471d57d172654a3ba2abc29000dbc2a6"><h4 class="sectiontitle">Question</h4><p id="mrs_01_1657__en-us_topic_0116216828_p524547991934">When a tenant accesses Phoenix, a message is displayed indicating that the tenant has insufficient rights.</p>
|
|
</div>
|
|
<div class="section" id="mrs_01_1657__sa96d28db02d244a8861fa4af825f7509"><h4 class="sectiontitle">Answer</h4><p id="mrs_01_1657__a7c52261c17e340cea578dbb1bf0ca8d4">You need to associate the HBase service and Yarn queues when creating a tenant.</p>
|
|
<p id="mrs_01_1657__a98d3601f2b9a426d944768f2490707b7">The tenant must be granted additional rights to perform operations on Phoenix, that is, the RWX permission on the Phoenix system table.</p>
|
|
<p id="mrs_01_1657__a233f564ad88445f592379b18e0ffb5ae">Example:</p>
|
|
<p id="mrs_01_1657__aceacf123cfd3414ba6f8bc42d8516afc">Tenant <strong id="mrs_01_1657__a3c4f31ad03344ec7ada2a05f5649da1a">hbase</strong> has been created. Log in to the HBase Shell as user <strong id="mrs_01_1657__a710bc5af3f7244bebb19f6fdb576977e">admin</strong> and run the <strong id="mrs_01_1657__afda998becf834587b98cbbc8d3c0503f">scan 'hbase:acl'</strong> command to query the role of the tenant. The role is <strong id="mrs_01_1657__ac0499f74381b4cca8dc0ba5b34659499">hbase_1450761169920</strong> (in the format of tenant name_timestamp).</p>
|
|
<p id="mrs_01_1657__acc020f953d8a46e9ba9d24338d87fcba">Run the following commands to grant rights to the tenant (if the Phoenix system table has not been generated, log in to the Phoenix client as user <strong id="mrs_01_1657__ab70278959a7e47d49d9fe58a8d14f3d3">admin</strong> first and then grant rights on the HBase Shell):</p>
|
|
<p id="mrs_01_1657__a2cfb7ba980314fc6a3692f9d39a1f870"><strong id="mrs_01_1657__a243b16bf6c804acb8af74ba783f5e615">grant '@hbase_1450761169920','RWX','SYSTEM.CATALOG'</strong></p>
|
|
<p id="mrs_01_1657__en-us_topic_0116216828_p512792891958"><strong id="mrs_01_1657__a6e3055d895f84899877c4f671c2da462">grant '@hbase_1450761169920','RWX','SYSTEM.FUNCTION'</strong></p>
|
|
<p id="mrs_01_1657__aa29a3e3012a24a29ac29fdea16e3c0a8"><strong id="mrs_01_1657__en-us_topic_0116216828_b165297792056">grant '@hbase_1450761169920','RWX','SYSTEM.SEQUENCE'</strong></p>
|
|
<p id="mrs_01_1657__a4ce1a2fd9f344910895026f8a9fdaee5"><strong id="mrs_01_1657__a7779d8b8914944959ae786f42c575dd5">grant '@hbase_1450761169920','RWX','SYSTEM.STATS'</strong></p>
|
|
<p id="mrs_01_1657__a6c2d6e291e424c6b9504d775617ac7eb">Create user <strong id="mrs_01_1657__en-us_topic_0116216828_b560757319210">phoenix</strong> and bind it with tenant <strong id="mrs_01_1657__en-us_topic_0116216828_b284263759214">hbase</strong>, so that tenant <strong id="mrs_01_1657__en-us_topic_0116216828_b602683549217">hbase</strong> can access the Phoenix client as user <strong id="mrs_01_1657__ade8616f7451f4619a3a462ad8610603b">phoenix</strong>.</p>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="mrs_01_1638.html">Common Issues About HBase</a></div>
|
|
</div>
|
|
</div>
|
|
|