List Ranger service instances (cm_hive, cm_hdfs, cm_tag, etc.).

Get a Ranger service instance by name.

Get the service definition schema (access types, resources, mask types) for a component type.

Search Ranger policies. policy_type: 0=access, 1=masking, 2=row-filter.

Get a policy by id or by service_name + policy_name.

Create a Ranger policy from a full JSON payload. WRITE OPERATION

Update an existing Ranger policy by id. WRITE OPERATION

Create or update a policy via the apply/upsert endpoint. WRITE OPERATION

Delete a policy by id or by service_name + policy_name. WRITE OPERATION

Create an access-control policy. WRITE OPERATION

Provide resources via resources_json or simple fields (database, table, column, path). users/groups/roles/accesses are comma-separated.

Create a data-masking policy (policyType=1). WRITE OPERATION

data_mask_type examples: MASK, MASK_SHOW_LAST_4, MASK_HASH, MASK_NULL, CUSTOM.

Create a tag-based access policy on the tag service (e.g. cm_tag). WRITE OPERATION

access_type is prefixed by target service, e.g. hive:select or hdfs:read.

List Ranger policy-engine roles.

Get a role by id or name.

Create a Ranger role with optional members. WRITE OPERATION

Update a Ranger role from JSON. WRITE OPERATION

Delete a Ranger role by id. WRITE OPERATION

Add users and/or groups to an existing role. WRITE OPERATION

List roles assigned to a user.

List Ranger users.

Get a Ranger user by name.

Create a Ranger user. WRITE OPERATION

user_roles: ROLE_USER or ROLE_SYS_ADMIN. group_ids: comma-separated numeric ids.

Update a Ranger user from JSON. WRITE OPERATION

Delete a Ranger user by id. WRITE OPERATION

List Ranger groups.

Get a Ranger group by name.

Create a Ranger group. WRITE OPERATION

Update a Ranger group from JSON. WRITE OPERATION

Delete a Ranger group by id. WRITE OPERATION

Search Ranger users by partial name.

Search Ranger groups by partial name.

List Ranger tag type definitions.

Get a tag definition by name.

List tag instances in Ranger.

List resources that have tags applied.

Search tag-based policies on the tag service (e.g. cm_tag).