Skip to content

Grant Processing Configuration

You can configure the BigQuery connector to control how it handles grant and revoke operations for access policies. These settings define retry behavior and batch processing capabilities to ensure reliable and efficient policy enforcement.

Proper grant processing configuration ensures reliable policy enforcement while optimizing performance. The connector can handle transient failures through retry mechanisms and can process multiple operations efficiently through batch processing.

Grant Processing Properties:

Property Name Description Default Value Supported Values
GRANT UPDATES MAX RETRY ATTEMPTS Sets the maximum number of retry attempts for grant or revoke updates 2 Any numeric value
GRANT UPDATES BATCH Enables batch processing for grant or revoke updates true true, false

Configuration Steps

Warning

  • Replace the example values with your actual configuration values.

Restart Required

Any changes to these properties require restarting the BigQuery connector application for the updates to take effect.

  1. Navigate to Settings → Applications in the Self-Managed Portal.

  2. Select BigQuery from the list of Connected Applications.

  3. Click on the application name or the icon, then click on Access Management → ADVANCED tab.

  4. Under the Add New Custom Properties, add the following:

    Bash
    1
2
    ranger.policysync.connector.0.perform.grant.updates.max.retry.attempts=3
ranger.policysync.connector.0.perform.grant.updates.batch=true

  5. Click SAVE to apply the changes.

  1. SSH to the instance where Privacera Manager is installed.

  2. Run the following command to open the .yml file to be edited.

    If you have multiple connectors, then replace instance1 with the appropriate connector instance name.

    Bash
    1
    vi ~/privacera/privacera-manager/config/custom-vars/connectors/bigquery/instance1/vars.connector.bigquery.yml

  3. Add or update the following properties:

    YAML
    1
2
3
4
5
    # Retry count for reliability
CONNECTOR_BIGQUERY_GRANT_UPDATES_MAX_RETRY_ATTEMPTS: "3"

# Enable batch processing for efficiency
CONNECTOR_BIGQUERY_GRANT_UPDATES_BATCH: "true"

  4. Once the properties are configured, run the following commands to update your Privacera Manager platform instance:

    Step 1 - Setup which generates the helm charts. This step usually takes few minutes.

    Bash
    1
2
    cd ~/privacera/privacera-manager
./privacera-manager.sh setup
    Step 2 - Apply the Privacera Manager helm charts.
    Bash
    1
2
    cd ~/privacera/privacera-manager
./pm_with_helm.sh upgrade
    Step 3 - Post-installation step which generates Plugin tar ball, updates Route 53 DNS and so on.

    Bash
    1
2
    cd ~/privacera/privacera-manager
./privacera-manager.sh post-install

  1. In PrivaceraCloud, go to Settings → Applications.

  2. Select BigQuery from the list of Connected Applications.

  3. Click on the application name or the icon, then click on Access Management → ADVANCED tab.

  4. Under the Add New Custom Properties, add:

    Bash
    1
2
    ranger.policysync.connector.0.perform.grant.updates.max.retry.attempts=3
ranger.policysync.connector.0.perform.grant.updates.batch=true

  5. Click SAVE.

  6. Once saved and enabled, the BigQuery connector will start. You can hover on the VIEW LOGS button to check the status, either Running or Stopped.

Note

Perform the following steps only if the connector does not reflect the updated configuration and requires a restart.

Restart the BigQuery Connector:

  1. Go to Settings → Applications → select the BigQuery connector application.

  2. Edit the application → Disable it → and Save it.

  3. Open the same application again and then: Enable it and Save it.

Comments