Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • AI for business
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
Yandex MetaData Hub
  • About Yandex MetaData Hub
    • Getting started
    • Service roles for access management
    • Troubleshooting
    • Terraform reference
    • Audit Trails events
  • Access management
  • Quotas and limits
  • Pricing policy
  • Public materials
  • Release notes

In this article:

  • managed-metastore.auditor
  • managed-metastore.viewer
  • managed-metastore.editor
  • managed-metastore.admin
  • managed-metastore.integrationProvider
  1. Apache Hive™ Metastore
  2. Service roles for access management

Service roles to manage metadata in a Apache Hive™ Metastore cluster

Written by
Yandex Cloud
Updated at October 15, 2025
  • managed-metastore.auditor
  • managed-metastore.viewer
  • managed-metastore.editor
  • managed-metastore.admin
  • managed-metastore.integrationProvider

With Apache Hive™ Metastore service roles, you can view Apache Hive™ Metastore cluster metadata and manage clusters.

managed-metastore.auditormanaged-metastore.auditor

The managed-metastore.auditor role allows you to view information on Apache Hive™ Metastore clusters and the Yandex Cloud managed DB service quotas.

managed-metastore.viewermanaged-metastore.viewer

The managed-metastore.viewer role allows you to view information on Apache Hive™ Metastore clusters and their runtime logs, as well as details on the Yandex Cloud managed DB service quotas.

Users with this role can:

  • View info on Apache Hive™ Metastore clusters.
  • View Apache Hive™ Metastore cluster logs.
  • View info on the Yandex Cloud managed DB service quotas.
  • View info on the relevant cloud and folder.

This role includes the managed-metastore.auditor permissions.

managed-metastore.editormanaged-metastore.editor

The managed-metastore.editor role allows you to manage Apache Hive™ Metastore clusters, as well as view their runtime logs and information on the Yandex Cloud managed DB service quotas.

Users with this role can:

  • View info on Apache Hive™ Metastore clusters, as well as create, modify, run, stop, and delete them.
  • Export and import Apache Hive™ Metastore clusters.
  • View Apache Hive™ Metastore cluster logs.
  • View info on the Yandex Cloud managed DB service quotas.
  • View info on the relevant cloud and folder.

This role includes the managed-metastore.viewer permissions.

To create clusters, you also need the vpc.user role.

managed-metastore.adminmanaged-metastore.admin

The managed-metastore.admin role allows you to manage Apache Hive™ Metastore clusters, as well as view their runtime logs and information on service quotas of Yandex Cloud managed DBs.

Users with this role can:

  • View info on Apache Hive™ Metastore clusters, as well as create, modify, run, stop, and delete them.
  • Export and import Apache Hive™ Metastore clusters.
  • View Apache Hive™ Metastore cluster logs.
  • View info on the Yandex Cloud managed DB service quotas.
  • View info on the relevant cloud and folder.

This role includes the managed-metastore.editor permissions.

To create clusters, you also need the vpc.user role.

managed-metastore.integrationProvidermanaged-metastore.integrationProvider

The managed-metastore.integrationProvider role allows the Apache Hive™ Metastore cluster to work with user resources required for its operation on behalf of the service account. You can assign this role to a service account linked to a Apache Hive™ Metastore cluster.

Users with this role can:

  • Add entries to log groups.
  • View info on log groups.
  • View info on log sinks.
  • View info on granted access permissions for Cloud Logging resources.
  • View info on log exports.
  • View info on Monitoring metrics and their labels, as well as upload and download metrics.
  • View the list of Monitoring dashboards and widgets and info on them, as well as create, modify, and delete them.
  • View the Monitoring notification history.
  • View details on Monitoring quotas.
  • View info on the relevant cloud and folder.

This role includes the logging.writer and monitoring.editor permissions.

Apache® and Apache Hive™ are either registered trademarks or trademarks of the Apache Software Foundation in the United States and/or other countries.

Was the article helpful?

Previous
Impersonation in Apache Hive™ Metastore
Next
Troubleshooting
© 2025 Direct Cursus Technology L.L.C.