数据湖探索 DLI-LakeFormation资源权限支持列表与策略项:Lakeformation权限策略

时间:2024-12-18 17:44:00

Lakeformation权限策略

表2 Lakeformation权限策略

类型

SQL语句

元数据 IAM 鉴权权限

SQL资源鉴权权限

DDL语句

ALTER DATABASE

database:describe

database:alter

database:DESCRIBE

database:ALTER

ALTER TABLE

database:describe

table:describe

table:alter

database:create

database:DESCRIBE

table:DESCRIBE

table:ALTER

database:CREATE_TABLE

column:SELECT或table:SELECT

ALTER VIEW

database:describe

table:describe

table:alter

database:DESCRIBE

table:DESCRIBE

column:SELECT

table:ALTER

CREATE DATABASE

database:describe

database:create

database:DESCRIBE

catalog:CREATE_DATABASE

CREATE OR REPLACE FUNCTION (CREATE)

database:describe

function:create

database:DESCRIBE

database:CREATE_FUNC

CREATE OR REPLACE FUNCTION (REPLACE)

database:describe

function:describe

function:alter

database:CREATE_FUNC

database:DESCRIBE

function:DESCRIBE

function:ALTER

CREATE TABLE

database:describe

table:describe

table:create

database:DESCRIBE

database:CREATE_TABLE

CREATE VIEW

database:describe

table:describe

table:drop

table:create

database:CREATE_TABLE

table:DESCRIBE(source\targer)

table:DROP(target)

column:SELECT

DROP DATABASE

database:describe

database:drop

database:DESCRIBE

database:DROP

DROP FUNCTION

database:describe

function:describe

function:drop

database:DESCRIBE

function:DESCRIBE

function:DROP

DROP TABLE

database:describe

table:describe

credential:describe

table:drop

database:DESCRIBE

table:DESCRIBE

table:DROP

DROP VIEW

database:describe

table:describe

table:drop

database:DESCRIBE

table:DESCRIBE(target\source)

table:DROP(target)

REPAIR TABLE

database:describe

table:describe

credential:describe

table:alter

database:DESCRIBE

table:DESCRIBE

table:ALTER

table:SELECT

TRUNCATE TABLE

database:describe

table:describe

table:alter

database:DESCRIBE

table:DESCRIBE

table:SELECT

table:UPDATE

DML语句

INSERT TABLE

database:describe

table:describe

table:alter

credential:describe

database:DESCRIBE

table:DESCRIBE

table:ALTER

table:INSERT

column:SELECT或table:SELECT

LOAD DATA

database:describe

table:describe

credential:describe

database:DESCRIBE

table:DESCRIBE

table:UPDATE

table:ALTER

table:SELECT

DR语句

SELECT

database:describe

table:describe

credential:describe

database:DESCRIBE

table:DESCRIBE

column:SELECT

EXPLAIN

取决于执行sql

取决于执行sql

Auxiliary 语句

ANALYZE TABLE

database:describe

table:describe

credential:describe

table:alter

database:DESCRIBE

table:DESCRIBE

table:SELECT

table:ALTER

DESCRIBE DATABASE

database:describe

database:DESCRIBE

DESCRIBE FUNCTION

database:describe

function:describe

database:DESCRIBE

function:DESCRIBE

DESCRIBE QUERY

database:describe

table:describe

database:DESCRIBE

table:DESCRIBE

table:SELECT

DESCRIBE TABLE

database:describe

table:describe

database:DESCRIBE

table:DESCRIBE

REFRESH TABLE

database:describe

table:describe

credential:describe

database:DESCRIBE

table:DESCRIBE

table:SELECT

REFRESH FUNCTION

database:describe

function:describe

database:DESCRIBE

function:DESCRIBE

SHOW COLUMNS

database:describe

table:describe

database:DESCRIBE

table:DESCRIBE

SHOW CREATE TABLE

database:describe

table:describe

database:DESCRIBE

table:DESCRIBE

SHOW DATABASES

database:describe

catalog:LIST_DATABASE

database:DESCRIBE

SHOW FUNCTIONS

database:describe

function:describe

database:DESCRIBE

SHOW PARTITIONS

database:describe

table:describe

database:DESCRIBE

table:DESCRIBE

SHOW TABLE EXTENDED

database:describe

table:describe

catalog:LIST_DATABASE

database:DESCRIBE

table:DESCRIBE

database:LIST_TABLE

SHOW TABLES

database:describe

table:describe

catalog:LIST_DATABASE

database:LIST_TABLE

database:DESCRIBE

SHOW TBLPROPERTIES

database:describe

table:describe

database:DESCRIBE

table:DESCRIBE

SHOW VIEWS

database:describe

table:describe

catalog:LIST_DATABASE

database:LIST_TABLE

database:DESCRIBE

support.huaweicloud.com/usermanual-dli/dli_01_0630.html