Using Cloner to Write to Target DCS Project, seems like acl_transformation_rbac.json file is mandatory for migaring permissions even if No Access or Permissions are being Changed.
In absence of a transformation file the during the PUT operation (write) we see an error:
ERROR:2023-08-08 11:24:17,489:_process_acl: Source User de3711ce-5367-4cdf-9b37-f7f4e8d01ecd not found in the target Dremio Environment. ACL Entry cannot be processed as per ignore_missing_acl_user configuration. space:DeepakSpace
Including an ACL file as shown below fixed the issue.
{"acl-transformation": [ { "source": {"user":"jonny@dremio.com"}, "target": {"user":"jonny@dremio.com"}} ] }
If i am not transforming any Permissions, why should we need to include a transformation file ??The workaround is cumbersome, requiring Cloner/Dremio ADMIN to consolidate a list of all Users/Roles from Source and either build a acl_transformation file to include all these roles/users or to Generate SQL to grant Privileges from sys.organization.users or sys.users on Source Dremio Cluster.
Writing permissions to DCS Project
Using Cloner to Write to Target DCS Project, seems like acl_transformation_rbac.json file is mandatory for migaring permissions even if No Access or Permissions are being Changed.
In absence of a transformation file the during the PUT operation (write) we see an error:
ERROR:2023-08-08 11:24:17,489:_process_acl: Source User de3711ce-5367-4cdf-9b37-f7f4e8d01ecd not found in the target Dremio Environment. ACL Entry cannot be processed as per ignore_missing_acl_user configuration. space:DeepakSpace
Including an ACL file as shown below fixed the issue.
{"acl-transformation": [ { "source": {"user":"jonny@dremio.com"}, "target": {"user":"jonny@dremio.com"}} ] }
If i am not transforming any Permissions, why should we need to include a transformation file ?? The workaround is cumbersome, requiring Cloner/Dremio ADMIN to consolidate a list of all Users/Roles from Source and either build a acl_transformation file to include all these roles/users or to Generate SQL to grant Privileges from sys.organization.users or sys.users on Source Dremio Cluster.