Skip to main content
Version: current [26.x]

Repair ACLS

This topic describes the Dremio CLI command, dremio-admin repair-acls which is used to repair access control lists of sources, spaces, and datasets.

This command identifies and outputs entities that are missing ACLs.

Admin CLI on Kubernetes

Be sure you read Using the Dremio Admin CLI on Kubernetes before putting anything learned on this page into practice on such a deployment.

Requirements​

  • Shut down all cluster nodes completely before running the command.
  • the repair-acls command is run on the main node.

Syntax​

Syntax for repair-acls command 
<dremio_home>/bin/dremio-admin repair-acls [options]

Options​

To obtain a list of restore options on the command line:

Get a list of options for repair-acls command 
./dremio-admin repair-acls -h
Output for repair-acls options 
    -h, --help
        show usage

    -d, --set-defaults
        if ACLs are missing on entities, set to defaults
        Default: false

Example: Show Entities with Missing ACLs​

The following example shows 3 entities with missing ACLs.

Example command for entities with missing ACLs 
./dremio-admin repair-acls

    Entity with path '[test1, consumer123]' (type: DATASET) is missing an ACL
    Entity with path '[test1, view112123]' (type: DATASET) is missing an ACL
    Entity with path '[test1, view1123]' (type: DATASET) is missing an ACL

Found 3 datasets with no default ACL configured.

Example: Set Default ACLs​

The following example sets default ACLs for entities that are missing an ACL.

Example command for setting default ACLs 
./dremio-admin repair-acls -d