Enabling Ranger authorization

You can configure fine-grained authorization using Apache Ranger. This topic provides the steps to enable Kudu's integration with Ranger from Cloudera Manager.

  1. From Cloudera Manager, go to Clusters > Kudu > Configurations.
  2. Select the Ranger Service with which Kudu should authorize requests.
  3. If Ranger high-availability is enabled for the cluster, add a Kudu service repository with the following configurations through the Ranger Admin web UI is required:
    # This example setup configures the Kudu service user as a privileged user to be
    # able to retrieve authorization policies stored in Ranger.
    
    <property>
      <name>policy.download.auth.users</name>
      <value>kudu</value>
    </property>
    The name of the added Kudu service repository needs to match the one specified in ranger.plugin.kudu.service.name of the Ranger client ranger-kudu-security.xml configuration file.