Resource-based Services and Policies
Ranger enables you to configure resource-based services for Hadoop components (e.g.
HBase, Kafka, Storm, etc.) and add access policies to those services.
Configuring resource-based services The Service Manager displays the page when you log in to the Ranger Admin Web UI. You can also access this page by selecting , or by clicking the Ranger icon at the upper left of the Ranger Admin Web UI. You can use Resource to add, edit or delete services for Hadoop resources (HDFS, HBase, HadoopSQL, etc.) and add access policies for those resources.Configuring resource-based policies To view the policies associated with a service, click the service name on . List of Policies displays the list of existing policies for that service, along with a search box.Adding a policy condition to a resource-based policy You can add a condition to a resource-based policy, using Ranger Admin Web UI when creating a new, or editing an existing policy.Adding a policy label to a resource-based policy You can add a label to a resource-based policy, using Ranger Admin Web UI when creating a new, or editing an existing policy.Preloaded resource-based services and policies Apache Ranger includes preloaded resource-based services and policies. Importing and exporting resource-based policies You can export and import policies from the Ranger Admin UI for cluster resiliency (backups), during recovery operations, or when moving policies from test clusters to production clusters. You can export/import a specific subset of policies (such as those that pertain to specific resources or user/groups) or clone the entire repository (or multiple repositories) via Ranger Admin UI.Row-level filtering and column masking in Hive You can use Apache Ranger row-level filters to set access policies for rows in Hive tables. You can also use Ranger column masking to set policies that mask data in Hive columns, for example to show only the first or last four characters of column data.