Configure HBase for Access Control Lists (ACL)
Use the following instructions to configure HBase for ACL:
Open
kinitas HBase user.Create a keytab for principal
hbase@REALMand store it in thehbase.headless.keytabfile. See instructions provided Creating Service Principals and Keytab Files for HDP for creating principal and keytab file.Open
kinitas HBase user. Execute the following command on your HBase Master:kinit -kt hbase.headless.keytab hbase
Start the HBase shell. On the HBase Master host machine, execute the following command:
hbase shell
Set ACLs using HBase shell:
grant '
$USER', '$permissions'where
$USERis any user responsible for create/update/delete operations in HBase.![[Note]](../common/images/admon/note.png)
Note You must set the ACLs for all those users who will be responsible for create/update/delete operations in HBase.
$permissionsis zero or more letters from the set "RWCA": READ('R'), WRITE('W'), CREATE('C'), ADMIN('A').

