About Release 7.0
This site contains documentation for HPE Ezmeral Data Fabric release 7.0, including installation, configuration, administration, and reference content, as well as content for the associated ecosystem components and drivers.
7.0 Installation
This section contains information about installing and upgrading HPE Ezmeral Data Fabric software. It also contains information about how to migrate data and applications from an Apache Hadoop cluster to a HPE Ezmeral Data Fabric cluster.
7.0 Data Fabric
HPE Ezmeral Data Fabric is the industry-leading data platform for AI and analytics that solves enterprise business needs.
7.0 Administration
This section describes how to manage the nodes and services that make up a cluster.
- Administering Users and Clusters
  Lists topics that help manage a data-fabric cluster.
- Administering Nodes
  Provides a synopsis of managing nodes in a cluster.
- Administering Volumes
  This section provide information about how to organize and manage data using volumes, a unique feature of HPE Ezmeral Data Fabric clusters.
- Administering Files and Directories
- Administering Tables
  Administration of the HPE Ezmeral Data Fabric Database is done primarily via the command line (maprcli) or with the Managed Control System (MCS). Regardless of whether the HPE Ezmeral Data Fabric Database table is used for binary files or JSON documents, the same types of commands are used with slightly different parameter options. HPE Ezmeral Data Fabric Database administration is associated with tables, columns and column families, and table regions.
- Administering Streams
- Administering Data Fabric Gateways
  A HPE Ezmeral Data Fabric gateway mediates one-way communication between a source HPE Ezmeral Data Fabric cluster and a destination cluster. You can replicate HPE Ezmeral Data Fabric Database tables (binary and JSON) and HPE Ezmeral Data Fabric Streams streams. HPE Ezmeral Data Fabric gateways also apply updates from JSON tables to their secondary indexes and propagate Change Data Capture (CDC) logs.
- Administering Services
- Monitoring the Cluster
  This section describes how to monitor the health and performance of a MapR cluster.
- Configuring Security
  Describes how to configure security and manage secure clusters.
- Managing Secure Clusters
  Provides procedures that will enable you to use MapR clusters securely.
- Administering the Data Access Gateway
  The HPE Ezmeral Data Fabric Data Access Gateway is a service that acts as a proxy and gateway for translating requests between lightweight client applications and the HPE Ezmeral Data Fabric cluster. This section describes considerations when upgrading the service, how to modify configuration settings, and how to administer and manage the service.
- Planning for High Availability
- Administrator's Reference
  This section contains in-depth reference information for the administrator.
  - maprcli and REST API Syntax
    This section provides information about the HPE Ezmeral Data Fabric command API. Most commands can be run on the command-line interface (CLI), or by making REST requests programmatically or in a browser.
  - MinIO Client (mc) Commands
    Lists mc commands that you can use to perform operations, such as creating and editing buckets and accounts in HPE Ezmeral Data Fabric Object Store.
    - mc alias
      Creates and manages user and service aliases.
    - mc admin account
      Creates and manages accounts.
    - mc admin policy
      Creates and manages user and group policies .
      - mc admin policy add
        Creates accounts, domains, and user policies.
      - mc admin policy update
        Updates accounts, domains, and user policies.
      - mc admin policy remove
        Removes a policy.
      - mc admin policy list
        List all policies.
      - mc admin policy info
        Returns information for a specified policy, along with the users and groups to which the policy is attached.
      - mc admin policy set
        Sets a policy for a user or a group.
      - mc admin policy unset
        Detaches a policy from a user or a group.
    - mc version
      Manages bucket versioning.
    - mc admin user
      Creates and manages users for each account.
    - mc admin creds
      Creates and manages access keys for users
    - mc admin group
      Creates and manages user groups.
    - mc admin recovery
      Manages bucket recovery.
    - mc retention
      Sets and manages the retention lock for buckets and objects.
    - mc legalhold
      Sets and manages the legal hold for buckets and objects.
    - mc ls
      Lists buckets and objects on a local cluster.
    - mc stat
      Displays object meta data .
    - mc mb
      Creates buckets on local cluster.
    - mc ub
      Updates the properties of buckets .
    - mc rb
      Removes buckets from ..
    - mc policy
      Manages anonymous access to buckets and objects.
    - mc rm
      Removes objects from a bucket. Operates on versioned objects in buckets on a local cluster
    - mc cp
      Copies objects to and from buckets.
    - mc mv
      Move objects between buckets.
    - mc head
      Displays the first n lines of an object.
    - mc cat
      Displays the contents of an object.
    - mc pipe
      Stream standard input (STDIN) to an object.
    - mc find
      Find objects meeting the specified criteria.
    - mc share
      Generates URLs for temporary access to objects.
    - mc sql
      Runs SQL queries on objects.
    - mc tag
      Manages tags assigned to buckets and objects.
  - Utilities
    Contains information about various scripts and utilities, that help setup, maintain, and monitor clusters.
  - Configuration Files
    This section contains reference information about various configuration files.
  - Alarms Reference
    The pages in this section provide details about all of the types of alarms.
  - HPE Ezmeral Data Fabric Environment
    This section provides information associated with the Data Fabric environment.
- Troubleshooting Cluster Administration
  Lists the common errors and their solutions.
- Best Practices for Backing Up HPE Ezmeral Data Fabric Information
  Lists the best practices and performance considerations to follow when backing up HPE Ezmeral Data Fabric information.
7.0 Development
This section contains information related to application development for Ezmeral ecosystem components and HPE Ezmeral Data Fabric products, including the file system, Database (Key-Value and JSON), and Event Streams.
Other Docs
This section contains release-independent information, including: Installer documentation, Ecosystem release notes, interoperability matrices, security vulnerabilities, and links to other data-fabric version documentation.
Glossary
Definitions for commonly used terms in MapR Converged Data Platform environments.

mc admin policy unset

Detaches a policy from a user or a group.

Syntax

CLI

mc admin policy unset TARGET POLICYNAME [ users=user1,user2 ] [ groups=group1,
group2 ] [ account=<account_name> ] [ domain=<domain_name> ] [ principalsaccount=<user/group
account> ]

POLICYNAME:
  Name of the policy to be detached.

users:
  List of users from which the policy must be detached.

groups:
  List of groups from which the policy must be detached.

account:
  Name of the account to which the policy belongs.

domain:
  Name of the domain to which the account belongs.

principalsaccount:
  Name of the account of the users or groups, if it is different from the policy's account.
  Currently, the only allowed value is 'default'.

FLAGS:
  --json                        enable JSON lines formatted output
  --debug                       enable debug output
  --insecure                    disable SSL certificate verification
  --help, -h                    show help

Parameters

Parameter	Description
`TARGET`	The alias of a configured HPE Ezmeral Object Store from which the command detaches the policy. This parameter is mandatory.
`POLICYNAME`	The name of the policy to detach. This parameter is mandatory.
`users`	Comma separated list of users from which the policy must be detached. Specify either a user or a group (using the `groups` parameter), or both.
`groups`	Comma separated list of groups from which the policy must be detached. Specify either a user (using the `users` parameter) or a group or both.
`account`	Name of the account whose policy is being detached.
`domain`	Name of the domain to which account belongs.
`principalsaccount`	Name of the account of the users or groups, if different from the policy's account. Currently, the allowed value for this is `default`.
`json`	Enables JSON formatted output
`debug`	Enables output for debugging
`insecure`	Disables SSL verification
`help`	Shows this help

Examples

Detaches the listbuckets policy from users james and daniel on the Object Store deployment with alias salesobject:
CLI
```
/opt/mapr/bin/mc admin policy unset salesobject listbuckets users='james,daniel'
```
Detaches the listbuckets policy from users james and daniel in account naphthara on the Object Store deployment with alias salesobject:
CLI
```
/opt/mapr/bin/mc admin policy unset salesobject listbuckets users='james,daniel' account='naphthara'
```