Skip to main content
To remove the access a role has, you edit or delete the policy that grants it. When you remove the role, it loses access to whatever the policy covers.

Prerequisites

Before starting this task, ensure you have the following: Required roles: nx1_migration_admin or nx1_migration_ops.

Remove a role’s access

Perform these steps to remove a role’s access.
  1. Log in to NexusOne.
  2. On the top navigation bar, hover your mouse over Govern and then select Data Access.
  3. Click the Who has access tab.
  4. Click one of the following options to show its fields:
    • Data: Select the catalog, and optionally the schema and table.
    • Storage location: Select a bucket to fill in the Location field, or enter only the bucket path in the Location field.
    • Tag: Select the tag.
  5. In the table, find the role. The From column shows the policy that grants its access.
  6. Click the All policies tab.
  7. In the Search policies by name field, enter the policy name from step 5.
  8. Remove the access with one of the following options:
    • To remove the role from the policy, click the pencil icon, remove the role from the policy, and save the policy.
    • To remove every role in the policy, click the trash icon, and then click Delete. This permanently deletes the policy from Ranger.

Additional resources

For an overview of the Govern feature, refer to Govern Overview.