User Privileges Enterprise

Use the User API to retrieve privilege information for Dremio users.

User Privileges Object

{
  "data": [
    {
      "name": "\"@dremio\".\"1c0accd3-e8c0-1d55-23a2-0ff6529f6c00\"",
      "type": "PDS",
      "privilege": "ALTER"
    },
    {
      "name": "\"@dremio\".\"1c0accd3-e8c0-1d55-23a2-0ff6529f6c00\"",
      "type": "PDS",
      "privilege": "SELECT"
    },
    {
      "name": "\"@dremio\".Business",
      "type": "FOLDER",
      "privilege": "ALTER"
    },
    {
      "name": "\"@dremio\".Business",
      "type": "FOLDER",
      "privilege": "SELECT"
    },
    {
      "name": "Samples",
      "type": "SOURCE",
      "privilege": "SELECT"
    },
    {
      "name": "Samples",
      "type": "SOURCE",
      "privilege": "INSERT"
    },
    {
      "name": "Samples",
      "type": "SOURCE",
      "privilege": "DROP"
    },
    {
      "name": "Samples",
      "type": "SOURCE",
      "privilege": "CREATE_TABLE"
    },
    {
      "name": "Samples",
      "type": "SOURCE",
      "privilege": "ALTER"
    },
    {
      "name": "\"testing\"",
      "type": "SPACE",
      "privilege": "SELECT"
    },
    {
      "name": "\"testing\"",
      "type": "SPACE",
      "privilege": "MANAGE_GRANTS"
    },
    {
      "name": "\"testing\"",
      "type": "SPACE",
      "privilege": "MODIFY"
    },
    {
      "name": "\"testing\"",
      "type": "SPACE",
      "privilege": "ALTER_REFLECTION"
    },
    {
      "name": "\"testing\"",
      "type": "SPACE",
      "privilege": "VIEW_REFLECTION"
    },
    {
      "name": "\"testing\"",
      "type": "SPACE",
      "privilege": "ALTER"
    },
    {
      "name": "\"testing\".\"NYC-taxi-trips\"",
      "type": "VDS",
      "privilege": "SELECT"
    },
    {
      "name": "\"testing\".\"NYC-taxi-trips\"",
      "type": "VDS",
      "privilege": "MANAGE_GRANTS"
    },
    {
      "name": "\"testing\".\"NYC-taxi-trips\"",
      "type": "VDS",
      "privilege": "ALTER"
    },
    {
      "name": "taxi",
      "type": "SCRIPT",
      "privilege": "MANAGE_GRANTS"
    },
    {
      "name": "taxi",
      "type": "SCRIPT",
      "privilege": "DELETE"
    },
    {
      "name": "taxi",
      "type": "SCRIPT",
      "privilege": "MODIFY"
    },
    {
      "name": "taxi",
      "type": "SCRIPT",
      "privilege": "VIEW"
    }
  ]
}

User Privileges Attributes

data [Object]

Information about the privileges the specified user has for the catalog objects in the current organization, up to a maximum of 100 privileges. Each object in the data array describes a privilege on a specific catalog object.

data

name String (UUID)

Name of the object to which the privilege applies. The name includes the entity's parent space or folder, if any.

Example: "@dremio"."1c0accd3-e8c0-1d55-23a2-0ff6529f6c00"

---

type String

Type of the object to which the privilege applies.

Enum: SPACE, SOURCE, HOME, FOLDER, PDS, VDS, FUNCTION

Example: PDS

---

privilege String

Name of the privilege that the user has for the object. Available privileges vary for different object types.

Example: ALTER

Retrieving User Privileges

Retrieve the specified user's privileges.

Method and URL

GET /api/v3/user/{id}/privilege

Parameters

id Path   String

Unique identifier of the user whose privileges you want to retrieve.

Example: b9dbebc7-bc3b-4d56-9154-31762ab65a43

Example Request

curl -X GET 'https://{DREMIO_ORIGIN}/api/v3/user/b9dbebc7-bc3b-4d56-9154-31762ab65a43/privilege' \
--header 'Authorization: Bearer <PersonalAccessToken>' \
--header 'Content-Type: application/json'

Example Response

{
  "data": [
    {
      "name": "\"@dremio\".\"1c0accd3-e8c0-1d55-23a2-0ff6529f6c00\"",
      "type": "PDS",
      "privilege": "ALTER"
    },
    {
      "name": "\"@dremio\".\"1c0accd3-e8c0-1d55-23a2-0ff6529f6c00\"",
      "type": "PDS",
      "privilege": "SELECT"
    },
    {
      "name": "\"@dremio\".Business",
      "type": "FOLDER",
      "privilege": "ALTER"
    },
    {
      "name": "\"@dremio\".Business",
      "type": "FOLDER",
      "privilege": "SELECT"
    },
    {
      "name": "Samples",
      "type": "SOURCE",
      "privilege": "SELECT"
    },
    {
      "name": "Samples",
      "type": "SOURCE",
      "privilege": "INSERT"
    },
    {
      "name": "Samples",
      "type": "SOURCE",
      "privilege": "DROP"
    },
    {
      "name": "Samples",
      "type": "SOURCE",
      "privilege": "CREATE_TABLE"
    },
    {
      "name": "Samples",
      "type": "SOURCE",
      "privilege": "ALTER"
    },
    {
      "name": "\"testing\"",
      "type": "SPACE",
      "privilege": "SELECT"
    },
    {
      "name": "\"testing\"",
      "type": "SPACE",
      "privilege": "MANAGE_GRANTS"
    },
    {
      "name": "\"testing\"",
      "type": "SPACE",
      "privilege": "MODIFY"
    },
    {
      "name": "\"testing\"",
      "type": "SPACE",
      "privilege": "ALTER_REFLECTION"
    },
    {
      "name": "\"testing\"",
      "type": "SPACE",
      "privilege": "VIEW_REFLECTION"
    },
    {
      "name": "\"testing\"",
      "type": "SPACE",
      "privilege": "ALTER"
    },
    {
      "name": "\"testing\".\"NYC-taxi-trips\"",
      "type": "VDS",
      "privilege": "SELECT"
    },
    {
      "name": "\"testing\".\"NYC-taxi-trips\"",
      "type": "VDS",
      "privilege": "MANAGE_GRANTS"
    },
    {
      "name": "\"testing\".\"NYC-taxi-trips\"",
      "type": "VDS",
      "privilege": "ALTER"
    },
    {
      "name": "taxi",
      "type": "SCRIPT",
      "privilege": "MANAGE_GRANTS"
    },
    {
      "name": "taxi",
      "type": "SCRIPT",
      "privilege": "DELETE"
    },
    {
      "name": "taxi",
      "type": "SCRIPT",
      "privilege": "MODIFY"
    },
    {
      "name": "taxi",
      "type": "SCRIPT",
      "privilege": "VIEW"
    }
  ]
}

Response Status Codes

200   OK

401   Unauthorized

404   Not Found

405   Method Not Allowed