Have trouble while setting up new user account with priviledge on Dremio Software

1

Currently, I’m using Dremio Software 24.3.2 version. I was using an admin account most of the time. But now to scale up, I have to create a new SQL account with specific privileges.
For example, now I need to create an account “userA” with the privilege to read the table “dbA.tableA”. It’s very simple in MySQL or SQL Server, but I’m having a headache when working with DremioSQL.
First, I create an account on the admin page

image
image1899×316 26.1 KB

But there is no option to add role on privilege on the UI, so I have to use the query as doc below

image
image1682×515 48.2 KB

Immediately gotan error like below
GRANT SELECT ON TABLE “hive_source.sapo_dw”.aggregatemerchantactivemonthlynew TO USER sapo_360;
java.lang.ClassNotFoundException: com.dremio.exec.planner.sql.handlers.CatalogGrantHandler

Try to check the Users and Privilege metadata, can’t find sys.users, sys.priviledge got permission error, even though I’m an admin

select * from sys.users;
SQL Error: VALIDATION ERROR: Object ‘users’ not found within ‘sys’. Please check that it exists in the selected context.
select * from sys.privileges;
SQL Error: SYSTEM ERROR: IllegalAccessException: Unable to retrieve sys.privileges.

In the doc, it said that sys db has these tables (version 24.3)

image
image1317×422 14.3 KB

I’m so tired right now, why is it so simple in SQL Server/MySQL but it’s so hard in Dremio?

2

@quangbilly79 RBAC is an Enterprise Edition feature

3

@balaji.ramaswamy
Tks, but do you mean that a simple task like granting read permission on table A to user A is not possible in Dremio Software (free version), only available in the paid version? I mean, grant permission is a very basic feature that every DBMS has.

Maybe I’m misunderstanding. In that case, could you show me a sample query to grant permission to read table X for user Y?
I read the doc, but no example query makes me super confused
In SQL Server, it’s very simple like
GRANT SELECT ON SAPO_DW.dbo.AggregateMerchantActiveDaily TO dungpv4;
Very simple query. I wonder what the Dremio Software query looks like.
Try Chat GPT, but no luck

4

Hi, I’m using Dremio Software with Hive catalog. Is it possible to Manage Permission? Just simple grant read permission on table X to person Y

1 Like