Datameer X's Advanced Governance module is sold as a separate add-on and includes tools to help you manage your data, such as Kerberos secured impersonation and /wiki/spaces/DASSB100/pages/32569527062SAML SSO. To purchase the Advanced Governance module, talk to a Datameer X sales or services representative. The following features are a part of Advanced Governance.
...
Datameer X's git plug-in automatically commits workbook changes to a git repository using the Datameer X Event Bus, providing easier access to prior states of a workbook. The following four new workbook REST APIs use the Git plug-in:
- /wiki/spaces/DASSB100/pages/32569527095
- /wiki/spaces/DASSB100/pages/32569527095
- /wiki/spaces/DASSB100/pages/32569527095
Read Workbook using Git
- Create Workbook using Git
- Overwrite Workbook using Git
- Roll Back Workbook using Git
Kerberos Plug-in
Kerberos secured impersonation is available through a plug-in.
...
Open the 'Admin' tab → 'Plug-Ins' and select the plug-in ''Obfuscation Plug-in''. The 'configure' icon appears in column 'Actions'.
- Click the ''Configure'' icon. The plug-in settings open.
- Choose the obfuscation algorithm "/wiki/spaces/DASSB110/pages/20221231386AES" from the drop-down.
- Enter the AES encryption key.
INFO: The key consists of 16 characters and must fulfill: select mode /wiki/spaces/DASSB110/pages/20221231386mode CBC, key size 128 bits, output text format Base64. - Enter the AES Initialization Vector and confirm with "Save". Column obfuscation is finished.
INFO: Use the same encryption key and initialization vector fulfilling the same preferences.
SAML SSO
The /wiki/spaces/DASSB100/pages/32569527062 plugThe SAML SSO plug-in delivered with Datameer X provides the basic infrastructure which allows Datameer X to participate in a SAML SSO environment as a service provider.
Anchor | ||||
---|---|---|---|---|
|
The following REST APIs for dependencies are included:
- /wiki/spaces/DASSB100/pages/32569527095
- /wiki/spaces/DASSB100/pages/32569527085
- /wiki/spaces/DASSB100/pages/32569527090
- /wiki/spaces/DASSB100/pages/32569527087
- /wiki/spaces/DASSB100/pages/32569527091
REST API for Migrating Folders
REST API for downloading and migrating folders between environments:
- /wiki/spaces/DASSB100/pages/32569527089
- /wiki/spaces/DASSB100/pages/32569527089Downloading Folders
- Migrating Folders
Multi-User Group Sharing
Info | ||
---|---|---|
| ||
By default, when secure impersonation is enabled, you could share an artifact with a single user group only. This results out of the limitation of a standard POSIX file permission level 'user:group:others'. With the plugin 'Multiple Group Sharing by ACLs', Datameer X creates a HDFS ACL for a certain file/ folder in the HDFS to reflect additional group permissions. Note that it is not supported to migrate from the ACL mode to the POSIX mode (see https://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html). The default sharing mode can be overwritten with the REST call. When the secure mode 'Native Multi User' (NMU) is enabled and the plugin 'Multiple Group Sharing by ACLs' is installed, then the multi group sharing is the default mechanism. |
...
- Ensure that the HDFS ALC functionality is enabled at the Hadoop cluster.
INFO: See Enabling ACLs. - /wiki/spaces/DASSB100/pages/32569526778Install the 'Multiple Group Sharing by ACLs' plug-in in Datameer X's 'Admin' section.
Activate the plug-in via REST API.
INFO: This step is not required when NMU mode is activated.Request Method PUT URI Syntax Code Block curl -v -u '<user>:<password>' -X PUT 'http://host:port/api/groupPermissionMode?mode=MULTIPLE_USERS_GROUPS'
Response The call should return '204 No Content' HTTP code.
...