SAM Authorization Limitations
SAM’s roles and access control policies are maintained in SAM. Ranger support for SAM is not available in HDF 3.0.
Creation of users and assignment to roles must be done using the SAM UI. In the HDF 3.0 release, there is no support to import users from KDC/AD.
Role assignment is at a user level. Assigning roles to a group is not supported in HDF 3.0 release.
New Roles or editing the out of the box role cannot be allows. However, the collaboration sharing features allow you to share each of the 5 resources across users meeting most use case requirements.