Skip to main content
Version: 24.3.x

Repair ACLS

This topic describes the Dremio CLI command, dremio-admin repair-acls which is used to repair access control lists of sources, spaces, and datasets.

This command identifies and outputs entities that are missing ACLs.

Requirements​

  • All cluster nodes are completely shut down.
  • the repair-acls command is run on the master node.

Syntax​

Syntax for repair-acls command
<dremio_home>/bin/dremio-admin repair-acls [options]

Options​

To obtain a list of restore options on the command line:

Get a list of options for repair-acls command
./dremio-admin repair-acls -h
Output for repair-acls options
    -h, --help
        show usage

    -d, --set-defaults
        if ACLs are missing on entities, set to defaults
        Default: false

Example: Show Entities with Missing ACLs​

The following example shows 3 entities with missing ACLs.

Example command for entities with missing ACLs
./dremio-admin repair-acls

    Entity with path '[test1, consumer123]' (type: DATASET) is missing an ACL
    Entity with path '[test1, view112123]' (type: DATASET) is missing an ACL
    Entity with path '[test1, view1123]' (type: DATASET) is missing an ACL

Found 3 datasets with no default ACL configured.

Example: Set Default ACLs​

The following example sets default ACLs for entities that are missing an ACL.

Example command for setting default ACLs
./dremio-admin repair-acls -d