MapR 5.0 Documentation : User Permission Requirements by API

The following tables describe the user permissions required for each API.

An asterisk (*) after the API name indicates that the API is only available via REST interfaces.

A | B | C | D | E | F | J | L | | N | R | S | T | UV

A

APIUser Requirement
acl editACL permission: a on the cluster and volume
acl setACL permission: a on the cluster and volume
acl showACL permission: login on the cluster
alarm clearACL permission: fc or a on the cluster
alarm clearallACL permission: fc or a on the cluster
alarm config loadACL permission: login on the cluster
alarm config saveACL permission: fc or a on the cluster
alarm listACL permission: login on the cluster
alarm namesACL permission: login on the cluster
alarm raiseACL permission: fc or a on the cluster

B

APIUser Requirement
blacklist userACL permission: a on the cluster
blacklist listuserACL permission: a on the cluster

C

APIUser Requirement
cluster mapreduce getACL permission: login on the cluster
cluster mapreduce setACL permission: fc or a on the cluster
cluster gateway deleteACL permission: fc or a on the source cluster
cluster gateway getACL permission: fc or a on the source cluster
cluster gateway listACL permission: fc or a on the source cluster
cluster gateway localACL permission: fc or a on the source cluster
cluster gateway resolveACL permission: fc or a on the source cluster
cluster gateway setACL permission: fc or a on the source cluster
config loadACL permission: login on the cluster
config saveACL permission: fc or a on the cluster

D

APIUser Requirement
dashboard infoACL permission: login on the cluster
dailhome ackdailACL permission: login on the cluster
dailhome enableACL permission: fc or a on the cluster
dailhome lastdialedACL permission: login on the cluster
dialhome metricsACL permission: login on the cluster
dailhome statusACL permission: login on the cluster
disk addACL permission: login on the cluster
disk listACL permission: login on the cluster
disk listallACL permission: fc or a on the cluster
disk removeACL permission: fc or a on the cluster
dump balancerinfoACL permission: login on the cluster
dump balancemetricsACL permission: login on the cluster
dump cldbnodesACL permission: login on the cluster
dump containerinfoACL permission: login on the cluster
dump containersACL permission: login on the cluster
dump fileserverworkinfoACL permission: login on the cluster
dump replicationmanagerinfoACL permission: login on the cluster
dump replicationmanagerqueueinfoACL permission: login on the cluster
dump rereplicationinfoACL permission: login on the cluster
dump rolebalancermetricsACL permission: login on the cluster
dump rolebalancerinfoACL permission: login on the cluster
dump volumeinfoACL permission: login on the cluster
dump volumenodesACL permission: login on the cluster
dump zkinfoACL permission: login on the cluster

E

APIUser Requirement
entity infoACL permission: login on the cluster
entity listACL permission: login on the cluster
entity modifyACL permission: fc or a on the cluster

F

APIUser Requirement
fid dumpOnly the root user or MAPR_USER user (user name under which MapR services runs) can run this command.
fid statOnly the root user or MAPR_USER user (user name under which MapR services runs) can run this command.

 

J

APIUser Requirement
job changepriority

For YARN applications, the user must be specified in the yarn.scheduler.capacity.root.<queue-path>.acl_administer_queue property in the conf/capacity-scheduler.xml.
For MapReduce v1 jobs, the user must be specified in mapred.queue.<queue-name>.acl-administer-job property in the mapred-queue-acls.xml.

job killFor YARN applications, the user must be specified in the yarn.scheduler.capacity.root.<queue-path>.acl_administer_queue property in the conf/capacity-scheduler.xml.
For MapReduce v1 jobs, the user must be specified in mapred.queue.<queue-name>.acl-administer-job property in the mapred-queue-acls.xml.
job linklogs

User that submitted the job

-or-

User with permissions on the log files.

job table*ACL permission: login on the cluster

L

APIUser Requirement
license addACL permission: fc or a on the cluster
license addcrlACL permission: fc or a on the cluster
license appsACL permission: login on the cluster
license listACL permission: login on the cluster
license listcrlACL permission: login on the cluster
license removeACL permission: fc or a on the cluster
licence showidACL permission: login on the cluster

M

APIUser Requirement
metrics APIACL permission: login on the cluster

N

APIUser Requirement
nagios generateACL permission: login on the cluster
nfsmgmt refreshexportsACL permission: fc or a on the cluster
node add-to-clusterACL permission: fc or a on the cluster
node allow-into-clusterACL permission: fc or a on the cluster
node cldbmasternone
node heatmapACL permission: login on the cluster
node listACL permission: login on the cluster
node listcldbsACL permission: login on the cluster
node listcldbzksACL permission: login on the cluster
node listzookeepersACL permission: login on the cluster
node maintenanceACL permission: fc or a on the cluster
node metricsACL permission: login on the cluster
node moveACL permission: fc or a on the cluster
node removeACL permission: fc or a on the cluster
node servicesACL permission: ss, fc or a on the cluster
node topoACL permission: login on the cluster

R

APIUser Requirement
rlimit getACL permission: login on the cluster
rlimit setACL permission: fc or a on the cluster

S

APIUser Requirement
schedule createACL permission: fc or a on the cluster
schedule listACL permission: login on the cluster
schedule modifyACL permission: fc or a on the cluster
schedule removeACL permission: fc or a on the cluster
service listACL permission: login on the cluster
setloglevel cldbACL permission: fc or a on the cluster
setloglevel fileserverACL permission: fc or a on the cluster
setloglevel hbmasterACL permission: fc or a on the cluster
setloglevel hbregionserverACL permission: fc or a on the cluster
setloglevel jobtrackerACL permission: fc or a on the cluster
setloglevel nfsACL permission: fc or a on the cluster
setloglevel tasktrackerACL permission: fc or a on the cluster

T

APIUser Requirement
table cf createACE Permission: Create/Rename Column Family (createrenamefamilyperm)

table cf edit
  • ACE Permission to rename a column family: Create/Rename Column Family (createrenamefamilyperm)
  • ACE Permission to edit the minimum or maximum version: Set min/max versions (versionperm)
  • ACE Permission to edit the time to live setting: Set min/max versions (versionperm)
  • ACE Permission to edit the in-memory setting: Pin CF in mempry (memoryperm)
  • ACE Permission to edit the compression setting: Set compression (compressionperm)
  • ACE Permission to edit column family permissions: Admin access (adminaccessperm)
table cf deleteACE Permission: Delete Column Family (deletefamilyperm)
table cf listACE Permissions: Read Data (readperm)
table cf colperm getACE Permission: Admin access (adminaccessperm)
table cf colperm setACE Permission: Admin access (adminaccessperm)
table cf colperm deleteACE Permission: Admin access (adminaccessperm)
table createPermission on the directory where you want to create the table
table deletePermission on the directory where you want to delete the table
table infoACE Permission: Admin access (adminaccessperm)
table listrecentACL permission: login on the cluster
table region listACL permission: login on the cluster
table region mergeACE permission: Split Merge (splitmergeperm)
table region splitACE permission: Split Merge (splitmergeperm)
table region packACE permission: Force pack (packperm)
table replica add
  • Read permission on the directory that contains the destination table
  • ACE Permission: Replication Access (replperm) on the source table
table replica autosetup
  • Write permission on the directory where you want to create the destination table

  • ACE permissions: Read Data (readperm) for the data in the source table that you want to copy

  • ACE permissions: Replication Access (replperm) on the source table

table replica editACE Permission: Replication Access (replperm) on the source table
table replica listACE Permission: Replication Access (replperm) on the source table
table replica pauseACE Permission: Replication Access (replperm) on the source table
table replica removeACE Permission: Replication Access (replperm) on the source table
table replica resumeACE Permission: Replication Access (replperm) on the source table
table upstream add
  • Read permission on the directory that contains the source table
  • ACE Permission: Replication Access (replperm) on the destination table
table upstream listACE Permission: Replication Access (replperm) on the destination table
table upstream removeACE Permission: Replication Access (replperm) on the destination table
task failattemptFor MapReduce v1 jobs, the user must be specified in mapred.queue.<queue-name>.acl-administer-job property in the mapred-queue-acls.xml.
task killattemptFor MapReduce v1 jobs, the user must be specified in mapred.queue.<queue-name>.acl-administer-job property in the mapred-queue-acls.xml.
task table*ACL permission: login on the cluster
trace dumpACL permission: login on the cluster
trace infoACL permission: login on the cluster
trace printACL permission: login on the cluster
trace resetACL permission: login on the cluster
trace resizeACL permission: login on the cluster
trace setlevelACL permission: login on the cluster
trace setmodeACL permission: login on the cluster

U

APIUser Requirement
urlsACL permission: login on the cluster

V

APIUser Requirement
virtualip addACL permission: fc or a on the cluster
virtualip editACL permission: fc or a on the cluster
virtualip listACL permission: login on the cluster
virtualip moveACL permission: fc or a on the cluster
virtualip removeACL permission: fc or a on the cluster
volume container moveACL permission: fc or m on the volume
volume container switchmasterOnly the root user or MAPR_USER user (user name under which MapR services runs) can run this command.
volume createACL permission: fc or cv on the cluster
volume dump createACL permission: fc or dump on the volume
volume dump restoreACL permission: fc or restore on the volume
volume fixmountpathACL permission: fc or m on the volume
volume infonone
volume link createACL permission: fc or m on the volume
volume link removeACL permission: fc or m on the volume
volume listACL permission: login on the cluster
volume mirror pushACL permission: fc or restore on the volume
volume mirror startACL permission: fc or restore on the volume
volume mirror stopACL permission: fc or restore on the volume
volume modifyACL permission: fc or m on the volume
volume mountACL permission: fc or m on the volume
volume moveACL permission: fc or m on the volume
volume removeACL permission: fc or d on the volume
volume renameACL permission: fc or d on the volume
volume showmountsACL permission: login on the cluster
volume snapshot createACL permission: fc or m on the volume
volume snapshot listACL permission: fc or m on the volume
volume snapshot preserveACL permission: fc or m on the volume
volume snapshot removeACL permission: fc or m on the volume
volume unmountACL permission: fc or m on the volume