Cloudera Docs

Enabling hierarchical authorization

You can enable or disable the hierarchical authorization parameter in Cloudera Manager to simplify access management.

Enabling this parameter allows you to assign policies to access parent level clusters and its child clusters. If you disable this feature, you must create separate access policies for parent and child clusters. This parameter is enabled by default.

You must enable the Role Based Access enabled parameter before enabling the Hierarchical Authorization Enabled parameter.

  1. Log in to Cloudera Manager
  2. Click Cloudera Observability
  3. Click Configuration
  4. In the search box, search for the Role Based Access enabled parameter
  5. Select the Role Based Access enabled check box.
  6. Click Save Changes.
  7. In the search box, search for the Hierarchical Authorization Enabled parameter
  8. Select the Hierarchical Authorization Enabled check box.
  9. Click Save Changes
  10. Click Actions
  11. Click Restart

This will allow you to access both parent level and child level environments.