​In Ranger, all access policies are configured within a repository for each service. For more information, refer to the Ranger User Guide.

To manage access policies for Ranger KMS, a repository is needed with Ranger for the Ranger KMS service. Ambari creates the repository automatically using the repository config user and password provided.

The repository config user also needs to be created as a principal in Kerberos with a password.