Authorization with Sentry

Availability Note. This feature relates to Cloudera installations accessed through Arcadia Engine connections. See Arcadia Connections.

Arcadia Enterprise supports authorization using Sentry, based on the model described in Enabling Sentry Authorization for Impala. Arcadia Enterprise extends this model to work both with tables and with analytical views on all Arcadia connections.

For commands and queries that reference analytical views, Arcadia Engine verifies authorization on the base table or logical view on which the analytical view was defined. There is no additional overhead of explicitly granting or managing access to analytical views.

Some of the commands and queries that either reference analytical views, or route to analytical views, do not support column-level authorization.