Skip to main content
POST
Apply a grant

Authorizations

Authorization
string
header
required

The access token received from the authorization server in the OAuth 2.0 flow.

Body

application/json

Who gets what access on what, with optional conditions.

level
enum<string>
required

A named bundle of Ranger access types.

Data targets use all four. Storage locations (url) use only READ and WRITE. The access types behind each level are resolved against the live service-def, so a level never sends a type Ranger doesn't know.

Available options:
read,
write,
manage,
owner
target
DataTarget · object
required

A catalog, schema, table or set of columns. Blank levels mean all.

groups
string[]
users
string[]
masks
ColumnMask · object[]

Data targets on one table only. Not allowed on storage.

row_filter
string | null

SQL predicate appended as WHERE. Data targets on one table only.

tag_mask_type
string | null

Tag targets only: hide every column carrying the tag with this mask type (e.g. MASK, MASK_HASH).

description
string
default:""

Response

Successful Response

target_label
string
required
policies
Policies · object[]
required

policy_id, policy_name, status ('created', 'updated' or 'unchanged'), policy_type, service each.