Cloudera Docs

Mapping the Apache Atlas system user to a managed identity

To ensure the Apache Atlas metadata extractor has the necessary permissions to access Azure Data Lake Storage (ADLS) Gen2, map the managed identity you created to the Apache Atlas system user.

You can add or modify these mappings in Management Console.

  1. In Management Console, click Environments, select an environment, and then click Actions > Manage Access > IDBroker Mappings > Edit.
  2. Under IDBroker Mappings, map the Atlas system user to the managed identity. Select the Atlas system user from the drop-down list of Cloudera users and groups, and then specify the managed identity's Resource ID (copied from the Azure portal) in the corresponding field.

For more information about IDBroker mappings and cloud storage access, see Mapping a CDP user or group to an Azure managed identity.

Alternatively, you can configure the mapping in Cloudera Manager:

  1. In Cloudera Manager, go to Knox > Configuration. Search for the user role, and then add the IDBroker Azure User Mapping information.
  2. Restart the Knox service.