Cloudera Docs

Enable authorization in Kafka with Ranger

Learn how to enable Ranger authorization for Kafka.

Ranger authorization requires that at least one of the following authentication mechanisms is enabled in Kafka:
  • Kerberos
  • Two-way TLS/SSL
  • LDAP
  • PAM
  1. In Cloudera Manager select the Kafka service.
  2. Select Configuration and find the RANGER Service property.
  3. Check the checkbox next to the name of the Ranger service that you want this Kafka service to depend on.
  4. Click Save Changes.
  5. Restart the Kafka service.
Ranger authorization for Kafka is enabled. The Kafka service depends on the selected Ranger service for authorization.
Configure resource-based services and policies for Kafka. Additionally, configure which resource-based service should be used for authorization.