Authorization Using Apache Sentry

Availability Note. This feature relates to Cloudera installations accessed through Arcadia Engine connections. See Arcadia Connections.

Arcadia Enterprise supports authorization using Apache Sentry, based on the model described in Enabling Sentry Authorization for Impala. Arcadia Enterprise extends this model to work with analytical views (as well as tables), available on all Arcadia connections.

For commands and queries that reference analytical views, Arcadia Engine verifies authorization on the base table or logical view on which the analytical view was defined. There is no additional overhead of explicitly granting or managing access to analytical views.

Some of the commands and queries that either reference analytical views, or route to analytical views, do not support column-level authorization.