This is documentation for MapR Version 5.0. You can also refer to MapR documentation for the latest release.

Skip to end of metadata
Go to start of metadata

The following tables describe the user permissions required for each API.

Icon

An asterisk (*) after the API name indicates that the API is only available via REST interfaces.

A | B | C | D | E | F | J | L | | N | R | S | T | UV

A

APIUser Requirement
acl editACL permission: a on the cluster and volume
acl setACL permission: a on the cluster and volume
acl showACL permission: login on the cluster
alarm clearACL permission: fc or a on the cluster
alarm clearallACL permission: fc or a on the cluster
alarm config loadACL permission: login on the cluster
alarm config saveACL permission: fc or a on the cluster
alarm listACL permission: login on the cluster
alarm namesACL permission: login on the cluster
alarm raiseACL permission: fc or a on the cluster

B

APIUser Requirement
blacklist userACL permission: a on the cluster
blacklist listuserACL permission: a on the cluster

C

APIUser Requirement
cluster mapreduce getACL permission: login on the cluster
cluster mapreduce setACL permission: fc or a on the cluster
cluster gateway deleteACL permission: fc or a on the source cluster
cluster gateway getACL permission: fc or a on the source cluster
cluster gateway listACL permission: fc or a on the source cluster
cluster gateway localACL permission: fc or a on the source cluster
cluster gateway resolveACL permission: fc or a on the source cluster
cluster gateway setACL permission: fc or a on the source cluster
config loadACL permission: login on the cluster
config saveACL permission: fc or a on the cluster

D

APIUser Requirement
dashboard infoACL permission: login on the cluster
dailhome ackdailACL permission: login on the cluster
dailhome enableACL permission: fc or a on the cluster
dailhome lastdialedACL permission: login on the cluster
dialhome metricsACL permission: login on the cluster
dailhome statusACL permission: login on the cluster
disk addACL permission: login on the cluster
disk listACL permission: login on the cluster
disk listallACL permission: fc or a on the cluster
disk removeACL permission: fc or a on the cluster
dump balancerinfoACL permission: login on the cluster
dump balancemetricsACL permission: login on the cluster
dump cldbnodesACL permission: login on the cluster
dump containerinfoACL permission: login on the cluster
dump containersACL permission: login on the cluster
dump fileserverworkinfoACL permission: login on the cluster
dump replicationmanagerinfoACL permission: login on the cluster
dump replicationmanagerqueueinfoACL permission: login on the cluster
dump rereplicationinfoACL permission: login on the cluster
dump rolebalancermetricsACL permission: login on the cluster
dump rolebalancerinfoACL permission: login on the cluster
dump volumeinfoACL permission: login on the cluster
dump volumenodesACL permission: login on the cluster
dump zkinfoACL permission: login on the cluster

E

APIUser Requirement
entity infoACL permission: login on the cluster
entity listACL permission: login on the cluster
entity modifyACL permission: fc or a on the cluster

F

APIUser Requirement
fid dumpOnly the root user or MAPR_USER user (user name under which MapR services runs) can run this command.
fid statOnly the root user or MAPR_USER user (user name under which MapR services runs) can run this command.

 

J

APIUser Requirement
job changepriority

For YARN applications, the user must be specified in the yarn.scheduler.capacity.root.<queue-path>.acl_administer_queue property in the conf/capacity-scheduler.xml.
For MapReduce v1 jobs, the user must be specified in mapred.queue.<queue-name>.acl-administer-job property in the mapred-queue-acls.xml.

job killFor YARN applications, the user must be specified in the yarn.scheduler.capacity.root.<queue-path>.acl_administer_queue property in the conf/capacity-scheduler.xml.
For MapReduce v1 jobs, the user must be specified in mapred.queue.<queue-name>.acl-administer-job property in the mapred-queue-acls.xml.
job linklogs

User that submitted the job

-or-

User with permissions on the log files.

job table*ACL permission: login on the cluster

L

APIUser Requirement
license addACL permission: fc or a on the cluster
license addcrlACL permission: fc or a on the cluster
license appsACL permission: login on the cluster
license listACL permission: login on the cluster
license listcrlACL permission: login on the cluster
license removeACL permission: fc or a on the cluster
licence showidACL permission: login on the cluster

M

APIUser Requirement
metrics APIACL permission: login on the cluster

N

APIUser Requirement
nagios generateACL permission: login on the cluster
nfsmgmt refreshexportsACL permission: fc or a on the cluster
node add-to-clusterACL permission: fc or a on the cluster
node allow-into-clusterACL permission: fc or a on the cluster
node cldbmasternone
node heatmapACL permission: login on the cluster
node listACL permission: login on the cluster
node listcldbsACL permission: login on the cluster
node listcldbzksACL permission: login on the cluster
node listzookeepersACL permission: login on the cluster
node maintenanceACL permission: fc or a on the cluster
node metricsACL permission: login on the cluster
node moveACL permission: fc or a on the cluster
node removeACL permission: fc or a on the cluster
node servicesACL permission: ss, fc or a on the cluster
node topoACL permission: login on the cluster

R

APIUser Requirement
rlimit getACL permission: login on the cluster
rlimit setACL permission: fc or a on the cluster

S

APIUser Requirement
schedule createACL permission: fc or a on the cluster
schedule listACL permission: login on the cluster
schedule modifyACL permission: fc or a on the cluster
schedule removeACL permission: fc or a on the cluster
service listACL permission: login on the cluster
setloglevel cldbACL permission: fc or a on the cluster
setloglevel fileserverACL permission: fc or a on the cluster
setloglevel hbmasterACL permission: fc or a on the cluster
setloglevel hbregionserverACL permission: fc or a on the cluster
setloglevel jobtrackerACL permission: fc or a on the cluster
setloglevel nfsACL permission: fc or a on the cluster
setloglevel tasktrackerACL permission: fc or a on the cluster

T

APIUser Requirement
table cf createACE Permission: Create/Rename Column Family (createrenamefamilyperm)

table cf edit
  • ACE Permission to rename a column family: Create/Rename Column Family (createrenamefamilyperm)
  • ACE Permission to edit the minimum or maximum version: Set min/max versions (versionperm)
  • ACE Permission to edit the time to live setting: Set min/max versions (versionperm)
  • ACE Permission to edit the in-memory setting: Pin CF in mempry (memoryperm)
  • ACE Permission to edit the compression setting: Set compression (compressionperm)
  • ACE Permission to edit column family permissions: Admin access (adminaccessperm)
table cf deleteACE Permission: Delete Column Family (deletefamilyperm)
table cf listACE Permissions: Read Data (readperm)
table cf colperm getACE Permission: Admin access (adminaccessperm)
table cf colperm setACE Permission: Admin access (adminaccessperm)
table cf colperm deleteACE Permission: Admin access (adminaccessperm)
table createPermission on the directory where you want to create the table
table deletePermission on the directory where you want to delete the table
table infoACE Permission: Admin access (adminaccessperm)
table listrecentACL permission: login on the cluster
table region listACL permission: login on the cluster
table region mergeACE permission: Split Merge (splitmergeperm)
table region splitACE permission: Split Merge (splitmergeperm)
table region packACE permission: Force pack (packperm)
table replica add
  • Read permission on the directory that contains the destination table
  • ACE Permission: Replication Access (replperm) on the source table
table replica autosetup
  • Write permission on the directory where you want to create the destination table

  • ACE permissions: Read Data (readperm) for the data in the source table that you want to copy

  • ACE permissions: Replication Access (replperm) on the source table

table replica editACE Permission: Replication Access (replperm) on the source table
table replica listACE Permission: Replication Access (replperm) on the source table
table replica pauseACE Permission: Replication Access (replperm) on the source table
table replica removeACE Permission: Replication Access (replperm) on the source table
table replica resumeACE Permission: Replication Access (replperm) on the source table
table upstream add
  • Read permission on the directory that contains the source table
  • ACE Permission: Replication Access (replperm) on the destination table
table upstream listACE Permission: Replication Access (replperm) on the destination table
table upstream removeACE Permission: Replication Access (replperm) on the destination table
task failattemptFor MapReduce v1 jobs, the user must be specified in mapred.queue.<queue-name>.acl-administer-job property in the mapred-queue-acls.xml.
task killattemptFor MapReduce v1 jobs, the user must be specified in mapred.queue.<queue-name>.acl-administer-job property in the mapred-queue-acls.xml.
task table*ACL permission: login on the cluster
trace dumpACL permission: login on the cluster
trace infoACL permission: login on the cluster
trace printACL permission: login on the cluster
trace resetACL permission: login on the cluster
trace resizeACL permission: login on the cluster
trace setlevelACL permission: login on the cluster
trace setmodeACL permission: login on the cluster

U

APIUser Requirement
urlsACL permission: login on the cluster

V

APIUser Requirement
virtualip addACL permission: fc or a on the cluster
virtualip editACL permission: fc or a on the cluster
virtualip listACL permission: login on the cluster
virtualip moveACL permission: fc or a on the cluster
virtualip removeACL permission: fc or a on the cluster
volume container moveACL permission: fc or m on the volume
volume container switchmasterOnly the root user or MAPR_USER user (user name under which MapR services runs) can run this command.
volume createACL permission: fc or cv on the cluster
volume dump createACL permission: fc or dump on the volume
volume dump restoreACL permission: fc or restore on the volume
volume fixmountpathACL permission: fc or m on the volume
volume infonone
volume link createACL permission: fc or m on the volume
volume link removeACL permission: fc or m on the volume
volume listACL permission: login on the cluster
volume mirror pushACL permission: fc or restore on the volume
volume mirror startACL permission: fc or restore on the volume
volume mirror stopACL permission: fc or restore on the volume
volume modifyACL permission: fc or m on the volume
volume mountACL permission: fc or m on the volume
volume moveACL permission: fc or m on the volume
volume removeACL permission: fc or d on the volume
volume renameACL permission: fc or d on the volume
volume showmountsACL permission: login on the cluster
volume snapshot createACL permission: fc or m on the volume
volume snapshot listACL permission: fc or m on the volume
volume snapshot preserveACL permission: fc or m on the volume
volume snapshot removeACL permission: fc or m on the volume
volume unmountACL permission: fc or m on the volume
  • No labels