Analyse Sentry Permission

sentry_permission_analysis.sql

SELECT  r.ROLE_NAME,g.GROUP_NAME
FROM DC_CDH_SENTRY.SENTRY_ROLE_GROUP_MAP m
INNER JOIN DC_CDH_SENTRY.SENTRY_GROUP g ON m.GROUP_ID = g.GROUP_ID
INNER JOIN DC_CDH_SENTRY.SENTRY_ROLE r ON r.ROLE_ID = m.ROLE_ID
ORDER BY r.ROLE_NAME,g.GROUP_NAME



SELECT
SENTRY_ROLE.ROLE_NAME,
SENTRY_DB_PRIVILEGE.PRIVILEGE_SCOPE,
SENTRY_DB_PRIVILEGE.SERVER_NAME,
SENTRY_DB_PRIVILEGE.DB_NAME,
SENTRY_DB_PRIVILEGE.TABLE_NAME,
SENTRY_DB_PRIVILEGE.COLUMN_NAME,
SENTRY_DB_PRIVILEGE.URI,
SENTRY_DB_PRIVILEGE.ACTION,
SENTRY_DB_PRIVILEGE.WITH_GRANT_OPTION
FROM SENTRY_ROLE_DB_PRIVILEGE_MAP
JOIN SENTRY_ROLE ON SENTRY_ROLE.ROLE_ID=SENTRY_ROLE_DB_PRIVILEGE_MAP.ROLE_ID
JOIN SENTRY_DB_PRIVILEGE ON SENTRY_DB_PRIVILEGE.DB_PRIVILEGE_ID=SENTRY_ROLE_DB_PRIVILEGE_MAP.DB_PRIVILEGE_ID;