grazie
Contributor

changing to SINGLE_USER in the policy allowed us to create clusters, and they didn't have the "NO METASTORE issue".