anchor.diff:          $ useradd -r -m -s /bin/bash nifi
           $ useradd -r -m -s /bin/bash thinkbig
   
  -- [ ] Apply the Spark ORC fix
  -
  -    https://wiki.thinkbiganalytics.com/display/RD/Spark+SQL+fails+on+empty+ORC+table%2C+HDP+2.4.2%2C+HDP+2.5
  -
  -    You can add this property in Ambari rather than editing the configuration file
  -    * Login to Ambari
  -    * Go to the Spark config section
  -    * Go to "custom spark defaults"
  -    * Add the property
   
   == Prepare the Kylo Edge Node
  -[options=interactive]
  -- [ ] Install the MySQL client on the edge node if not already there
  +
  +. Install the MySQL client on the edge node if not already there
   
       $ yum install mysql
   
  -- [ ] Create a MySQL admin user or use root user to grant "create schema" access from the Kylo edge node
  +. Create a MySQL admin user or use root user to grant "create schema" access from the Kylo edge node
   
       This is required to install the "thinkbig" schema during Kylo installation
   
       Example:
  +
       GRANT ALL PRIVILEGES ON *.* TO 'root'@'KYLO_EDGE_NODE_HOSTNAME' IDENTIFIED BY 'abc123' WITH GRANT OPTION;
       FLUSH PRIVILEGES;
   
  -- [ ] Create the "kylo" MySQL user
  +. Create the "kylo" MySQL user
   
       CREATE USER 'kylo'@'<KYLO_EDGE_NODE>' IDENTIFIED BY 'abc123';
       grant create,select,insert,update,delete ON thinkbig.* to 'kylo'@'KYLO_EDGE_NODE_HOSTNAME';
       FLUSH PRIVILEGES;
   
  -- [ ] Grant kylo user access to the hive MySQL metadata
  +. Grant kylo user access to the hive MySQL metadata
   
       GRANT select ON hive.SDS TO 'kylo'@'KYLO_EDGE_NODE_HOSTNAME';
       GRANT select ON hive.TBLS TO 'kylo'@'KYLO_EDGE_NODE_HOSTNAME';
  
positive.code: 
      [root /]# vi /opt/thinkbig/thinkbig-services/conf/application.properties
  
      spring.datasource.url=jdbc:mysql://172.31.42.166:3306/thinkbig
      spring.datasource.username=root
      spring.datasource.password=abc123
  
      ambariRestClientConfig.host=172.31.38.86
      ambariRestClientConfig.username=kylo
      ambariRestClientConfig.password=abc123
  
      metadata.datasource.url=jdbc:mysql://172.31.42.166:3306/thinkbig
      metadata.datasource.username=root
      metadata.datasource.password=abc123
  
      hive.datasource.url=jdbc:hive2://ip-172-31-42-166.us-west-2.compute.internal:10000/default;principal=hive/ip-172-31-42-166.us-west-2.compute.internal@US-WEST-2.COMPUTE.INTERNAL
  
      hive.metastore.datasource.url=jdbc:mysql://172.31.42.166:3306/hive
      hive.metastore.datasource.username=kylo
      hive.metastore.datasource.password=abc123
  
      modeshape.datasource.url=jdbc:mysql://172.31.42.166:3306/thinkbig
      modeshape.datasource.username=root
      modeshape.datasource.password=abc123
  
      kerberos.hive.kerberosEnabled=true
      kerberos.hive.hadoopConfigurationResources=/etc/hadoop/conf/core-site.xml,/etc/hadoop/conf/hdfs-site.xml
      kerberos.hive.kerberosPrincipal=thinkbig/ip-172-31-42-133.us-west-2.compute.internal@US-WEST-2.COMPUTE.INTERNAL
      kerberos.hive.keytabLocation=/etc/security/keytabs/thinkbig.service.keytab
  
      nifi.service.mysql.database_user=root
      nifi.service.mysql.password=abc123
      nifi.service.mysql.database_connection_url=jdbc:mysql://172.31.42.166
  
      nifi.service.hive_thrift_service.database_connection_url=jdbc:hive2://35.161.50.202:10000/default;principal=nifi/nifi-cb-kylo-0-4-3-test@US-WEST-2.COMPUTE.INTERNAL
      nifi.service.hive_thrift_service.kerberos_principal=nifi/ip-172-31-42-133.us-west-2.compute.internal@US-WEST-2.COMPUTE.INTERNAL
      nifi.service.hive_thrift_service.kerberos_keytab=/etc/security/keytabs/nifi.service.keytab
      nifi.service.hive_thrift_service.hadoop_configuration_resources=/etc/hadoop/conf/core-site.xml,/etc/hadoop/conf/hdfs-site.xml
  
  
negative.code: == About
  This guide will help you understand the steps involved with deploying Kylo to a kerberos cluster
  with minimal admin privileges. No super user privileges will be provided to the "nifi" or "thinkbig"
  user. The only usage for an administrative account will be for thinkbig-services to access the Ranger REST API
  
  There are two ways you can configure hive to manage users on the cluster.
  
  