Apache Ranger provides a centralized security framework to manage fine-grained access control and auditing. You can use the CDP Mangagement Console to create and manage CDP groups.

Managing Ranger Access Policies
Apache Ranger provides fine-grained access control for CDP services.
Managing Ranger Auditing
Apache Ranger provides access auditing and reporting for CDP services.
Managing Group Membership
A user with the Groups Admin role can create and manage CDP One groups.