title: Cloudera Sentry with LDAP - Unable to add user as Sentry admin
body: <p>Background:</p>
  
  <p>By default the Sentry service has the users <code>hive</code>, <code>hue</code> and <code>impala</code> as the sentry admins. This is w.r.t to the property on Cloudera Manager (CM) <code>sentry.service.admin.group</code>. I want to add a user or group which has my user account, so that I can become the Sentry admin.</p>
  
  <p>Current environment:</p>
  
  <ol>
  <li>Cloudera 5.4.7 with CM</li>
  <li>Postgres databases for CDH, Hive and Sentry</li>
  <li>Sentry version 1.4</li>
  </ol>
  
  <p>Question:</p>
  
  <p>I have integrated OpenLDAP so that Beeline authentication can be done through LDAP user and password credentials. Before LDAP integration to HiveServer2, I used root as the Sentry admin, (Beeline does not strictly check for password without LDAP) so I could execute commands like <code>show roles;</code> and <code>create roles;</code> as <code>root</code>.</p>
  
  <p>Now with LDAP integrated I cannot login as <code>root</code>, since it does not have an entry on the LDAP server and adding it there is not an option, so I want to add a user called <code>johndoe</code> as the admin for Sentry so that he can create roles like how <code>root</code> did.</p>
  
  <p>Is this something that I need to set at a Postgres level? I mean by entering the Sentry database and <code>GRANT</code>'ing some privilege there?</p>
  
  <p>What have I tried so far:</p>
  
  <ol>
  <li><p>I have tried all combinations of using local users in the property <code>sentry.service.admin.group</code>, adding local users to the <code>hive</code> group, using LDAP users, LDAP groups - Nothing ! </p></li>
  <li><p>I don't understand where it is going wrong. Or is it that Sentry only identifies <code>hive</code>, <code>hue</code> and <code>impala</code> as the admins.</p></li>
  </ol>
  
  <p>Any help would be greatly appreciated. Stuck on this for ten days now.</p>