<provider> <role>identity-assertion</role> <name>Pseudo</name> <enabled>true</enabled> <param> <name>principal.mapping</name> <value>guest,alice=hdfs;mary=hive</value> </param> <param> <name>group.principal.mapping</name> <value>*=users;sam,dwayne,brenda=admins;joe=analysts</value> </param> </provider>