About Release 7.9.0
This site contains documentation for HPE Ezmeral Data Fabric release 7.9.0, including installation, configuration, administration, and reference content, as well as content for the associated ecosystem components and drivers.
7.9.0 Installation
This section contains information about installing and upgrading HPE Ezmeral Data Fabric software. It also contains information about how to migrate data and applications from an Apache Hadoop cluster to a HPE Ezmeral Data Fabric cluster.
7.9.0 Data Fabric
HPE Ezmeral Data Fabric is the industry-leading data platform for AI and analytics that solves enterprise business needs.
7.9.0 Administration
This section describes how to manage the nodes and services that make up a cluster.
- Administering Users and Clusters
  Lists topics that help manage a data-fabric cluster.
- Administering Nodes
  Provides a synopsis of managing nodes in a cluster.
- Administering Volumes
  This section provide information about how to organize and manage data using volumes, a unique feature of HPE Ezmeral Data Fabric clusters.
- Administering Files and Directories
- Administering Tables
  Administration of the HPE Ezmeral Data Fabric Database is done primarily via the command line (maprcli) or with the Managed Control System (MCS). Regardless of whether the HPE Ezmeral Data Fabric Database table is used for binary files or JSON documents, the same types of commands are used with slightly different parameter options. HPE Ezmeral Data Fabric Database administration is associated with tables, columns and column families, and table regions.
- Administering Streams
- Administering Data Fabric Gateways
  A HPE Ezmeral Data Fabric gateway mediates one-way communication between a source HPE Ezmeral Data Fabric cluster and a destination cluster. You can replicate HPE Ezmeral Data Fabric Database tables (binary and JSON) and HPE Ezmeral Data Fabric Streams streams. HPE Ezmeral Data Fabric gateways also apply updates from JSON tables to their secondary indexes and propagate Change Data Capture (CDC) logs.
- Administering Services
- Monitoring the Cluster
  This section describes how to monitor the health and performance of a MapR cluster.
- Configuring Security
  Describes how to configure security and manage secure clusters.
  - Configuring Data Fabric Security
    Provides usage information for frequently used security functionality, including Access Control Lists (ACLs), Access Control Expressions (ACEs), file permissions, and subnet allowlisting.
    - Getting Started with HPE Ezmeral Data Fabric Security
      Describes quick implementation of security.
    - Managing Encryption
      Provides information that allows you to use encryption across the HPE Ezmeral Data Fabric platform.
    - Determining if a Cluster is Secure and Enabled for Encryption
      Explains how to use the Control System, the CLI, and REST API to determine whether a cluster is secure and whether on-wire encryption and data-at-rest encryption are enabled at the cluster and volume levels.
    - Managing FIPS Security
      The topics in this section describe how to learn about and manage your FIPS configuration.
    - Configuring Authentication
      Provides information about Data Fabric tickets, Kerberos, Pluggable Authentication Module (PAM) authentication.
    - Managing Access Controls
      Describes how to create, enable, and use ACLs and ACEs.
      - Managing Access Control Lists
        Defines and describes how to create ACLs.
      - Managing Access Control Expressions
        Defines and describes how to create, enable, and use ACEs.
        ACE Syntax
        Describes how to construct ACEs.
        Creating User Roles for ACEs
        Describes how to create and use roles for access control.
        Enabling Volume, Directory, and File Authorizations with ACEs
        Describes how to set access control expressions for volumes, directories and files.
        Enabling Table and Stream Authorizations with ACEs
        Permission Types for Fields and Column Families in JSON Tables
        By using ACEs, you can grant or deny access to fields and column families that are in JSON tables.
        Obtaining readperm and writeperm on Fields
        In this scenario, you want to perform an operation on a field, and the operation requires that you have readperm and writeperm permissions on that field. How you obtain these permissions depends on whether the field is in the default column family or a non-default column family.
        Obtaining readperm or writeperm on Fields
        In this scenario, you want to perform an operation on a field, and the operation requires that you have readperm or writeperm permissions on that field. How you obtain either permission depends on whether the field is in the default column family or a non-default column family.
        Setting Permissions on Arrays
        If you are granting permissions on a field and the field contains array data, you must grant the permission on the array field. This grants access not only to array data in the field, but also nested documents and scalar data. It is also possible to set permissions on subfields within nested documents that are stored in an array.
        Granting Permissions on JSON Tables
        Summarizes the default ACEs for the supported ways of setting read, traverse, and write permissions.
        Defining ACEs Using the Access Control Expression Builder
        Describes how to build ACEs using the Expression Builder.
        Setting Data ACEs
        Describes how to set ACEs using both the GUI and the CLI.
        Granting Access Using Security Policy
        Describes how to grant access to objects using ACEs in a security policy.
      - Creating Subnet Whitelists
        Provides the procedure necessary to restrict access to cluster data.
    - Configuring Policy-Based Security
      Starting in HPE Ezmeral Data Fabric 6.2.0 (EEP 7.0.0), HPE Ezmeral Data Fabric supports Policy-Based Security. Policy-Based Security is a mechanism that enables administrators to create security policies for simplified data management. Administrative users can create and manage security policies through the control system, maprcli, REST API, Hadoop and Linux commands, and Java APIs.
    - Customizing Security in HPE Ezmeral Data Fabric
      Describes the .customSecure file and how HPE Ezmeral Data Fabric 6.x handles custom security settings.
  - Managing Impersonation
    Provides instructions for enabling and using Data Fabric impersonation features.
- Managing Secure Clusters
  Provides procedures that will enable you to use Data Fabric clusters securely.
- Administering the Data Access Gateway
  The HPE Ezmeral Data Fabric Data Access Gateway is a service that acts as a proxy and gateway for translating requests between lightweight client applications and the HPE Ezmeral Data Fabric cluster. This section describes considerations when upgrading the service, how to modify configuration settings, and how to administer and manage the service.
- Planning for High Availability
- Administrator's Reference
  This section contains in-depth reference information for the administrator.
- Troubleshooting Cluster Administration
  Lists the common errors and their solutions.
- Best Practices for Backing Up HPE Ezmeral Data Fabric Information
  Lists the best practices and performance considerations to follow when backing up HPE Ezmeral Data Fabric information.
- IPv6 Support in Data Fabric
  Describes the IPv6 support feature for Data Fabric.
7.9.0 Development
This section contains information related to application development for Ezmeral ecosystem components and HPE Ezmeral Data Fabric products, including the file system, Database (Key-Value and JSON), and Event Streams.
Other Docs
This section contains release-independent information, including: Installer documentation, Ecosystem release notes, interoperability matrices, security vulnerabilities, and links to other data-fabric version documentation.
Glossary
Definitions for commonly used terms in MapR Converged Data Platform environments.

Granting Permissions on JSON Tables

Summarizes the default ACEs for the supported ways of setting read, traverse, and write permissions.

The default permissions for column families are determined when tables are created. The default permissions for fields are inherited from the column family where the fields are located.

Action	Method	Permissions	Default Access-Control Expressions
Set default permissions on new column families when creating a JSON table.	Java API	`-defaultreadperm -defaulttraverseperm -defaultwriteperm`	`u:<ID of the process>`
	`maprcli table create`		`u:<user ID of table creator>`
	mapr dbshell
	Control System
Set default permissions on new column families when editing a JSON table.	`maprcli table edit`		Current ACEs
	Control System		Current ACEs
Set permissions on a column family when creating the column family.	`maprcli table cf create`	`-readperm -traverseperm -writeperm -indexperm`	ACEs for `‑defaultreadperm`, `‑defaulttraverseperm`, and `‑defaultwriteperm`
	Control System
Set permissions on a column family when editing the column family.	`maprcli table cf edit`		Current ACEs
	Control System		Current ACEs
Set permissions on individual fields.	`maprcli table cf colperm set`		Inherited from column family or parent field
Set permissions on individual fields.	Control System		Inherited from column family or parent field
Set the dynamic mask	`maprcli table cf column datamask set`	`-defaultunmaskedreadperm -unmaskedreadperm`	Set to the table creator
	`maprcli table cf colperm set`
	`maprcli table create`
	`maprcli table edit`
	`maprcli table cf create`
	`maprcli table cf edit`
	`maprcli table cf colperm set`
	Control System

Partners Support Dev-Hub Community Training ALA Privacy Policy Glossary

HPE Ezmeral Data Fabric – Customer-Managed 7.9.0 Documentation
Abstract	This site contains documentation for the customer-managed platform of the HPE Ezmeral Data Fabric version 7.9.0 including installation, configuration, administration, and reference content, as well as content for the associated bundled ecosystem components and drivers.
Published	November 2024
Edition	7.9.0