Configuring Ranger for NiFi

If your cluster contains Ranger, you need to configure the Ranger service before starting NiFi. To create the default Ranger policies used by Cloudera Flow Management (CFM), you have to run the CreateMarkerFile command once.

  1. Go to Cloudera Manager > Clusters.
  2. Select NiFi.
  3. Go to the Configuration tab.
  4. Search for the RANGER Service configuration and enable it.
  5. Modify the ranger.plugin.nifi.service.name property to match the new Ranger service name.
  6. Make sure that ranger.plugin.nifi.policy.cache.dir (Ranger NiFi Plugin Policy Cache Directory Path) is set to /var/lib/nifi/policy-cache.
  7. Confirm that NiFi is in a stopped state.

    The CreateMarkerFile command can only be used when NiFi service is not running.

  8. On the Cloudera Manager UI, go to NiFi service settings.
  9. Run the Create Marker File action from the Actions dropdown.
    After completing these actions and any other required NiFi-related post-configuration steps, starting the service automatically creates the default Ranger policies, if they are missing.