A vital part of the Ranger architecture is the ability to get users and groups from the corporate AD to use in policy definitions.
Ranger usersync runs as separate daemon:
It can also be (re)started separately from Ambari: