Skip to main content
Version: current [26.x]

Repair ACLS

This topic describes the Dremio CLI command, dremio-admin repair-acls which is used to repair access control lists of sources, spaces, and datasets.

This command identifies and outputs entities that are missing ACLs.

Admin CLI on Kubernetes

Be sure you read Using the Dremio Admin CLI on Kubernetes before putting anything learned on this page into practice on such a deployment.

Requirements

  • Shut down all cluster nodes completely before running the command.
  • the repair-acls command is run on the master node.

Syntax

Syntax for repair-acls command
<dremio_home>/bin/dremio-admin repair-acls [options]

Options

To obtain a list of restore options on the command line:

Get a list of options for repair-acls command
./dremio-admin repair-acls -h
Output for repair-acls options
    -h, --help
show usage

-d, --set-defaults
if ACLs are missing on entities, set to defaults
Default: false

Example: Show Entities with Missing ACLs

The following example shows 3 entities with missing ACLs.

Example command for entities with missing ACLs
./dremio-admin repair-acls

Entity with path '[test1, consumer123]' (type: DATASET) is missing an ACL
Entity with path '[test1, view112123]' (type: DATASET) is missing an ACL
Entity with path '[test1, view1123]' (type: DATASET) is missing an ACL

Found 3 datasets with no default ACL configured.

Example: Set Default ACLs

The following example sets default ACLs for entities that are missing an ACL.

Example command for setting default ACLs
./dremio-admin repair-acls -d