<provider>
<role>identity-assertion</role> <name>Pseudo</name>
<enabled>true</enabled> <param>
<name>principal.mapping</name>
<value>guest,alice=hdfs;mary=hive</value> </param> <param>
<name>group.principal.mapping</name>
<value>*=users;sam,dwayne,brenda=admins;joe=analysts</value> </param>
</provider>