Enable Ranger authorization

You can configure fine-grained authorization using Apache Ranger. This topic provides the steps to enable Kudu's integration with Ranger from Cloudera Manager.

  1. From Cloudera Manager, go to Clusters > Kudu > Configurations.
  2. Select the Ranger Service with which Kudu should authorize requests.
  3. If Ranger high-availability is enabled for the cluster, add a Kudu service repository with the following configurations through the Ranger Admin web UI is required:
    # This example setup configures the Kudu service user as a privileged user to be
    # able to retrieve authorization policies stored in Ranger.
    Note that the name of the added Kudu service repository needs to match the one specified in ranger.plugin.kudu.service.name of the Ranger client ranger-kudu-security.xml configuration file.