Skip to main content
GET
Show who has access to a table, schema, catalog, storage location or tag

Authorizations

Authorization
string
header
required

The access token received from the authorization server in the OAuth 2.0 flow.

Query Parameters

catalog
string | null

Catalog (or database) for a data target.

schema
string | null

Schema. Omit for the whole catalog.

table
string | null

Table. Omit for the whole schema.

columns
string | null

Comma-separated columns. Omit for all.

url
string | null

Storage URL, e.g. s3a://lake/raw/.

recursive
boolean
default:true

For a URL: include everything under it.

tag
string | null

A tag: access through the tag service.

Response

Successful Response

resource_label
string
required
target_kind
enum<string>
required
Available options:
data,
storage,
tag
principals
PrincipalAccess · object[]
required
policy_count
integer
required
warnings
string[]

What couldn't be checked, e.g. tag-based access when DataHub is unreachable.

super_admins
string[]

The Ranger service's super users and groups (e.g. trino-admin). Ranger gives them every permission everywhere, whatever the policies say, so they aren't listed as principals.