Ranger User Guide

Also available as:

PDF

Contents

Hortonworks Data Platform

Ranger User Guide

Copyright © 2012-2015 Hortonworks, Inc.

Except where otherwise noted, this document is licensed under Creative Commons Attribution ShareAlike 4.0 License

http://creativecommons.org/licenses/by-sa/4.0/legalcode

The Hortonworks Data Platform, powered by Apache Hadoop, is a massively scalable and 100% open source platform for storing, processing and analyzing large volumes of data. It is designed to deal with data from many sources and formats in a very quick, easy and cost-effective manner. The Hortonworks Data Platform consists of the essential set of Apache Hadoop projects including MapReduce, Hadoop Distributed File System (HDFS), HCatalog, Pig, Hive, HBase, ZooKeeper and Ambari. Hortonworks is the major contributor of code and patches to many of these projects. These projects have been integrated and tested as part of the Hortonworks Data Platform release process and installation and configuration tools have also been included.

Unlike other providers of platforms built using Apache Hadoop, Hortonworks contributes 100% of our code back to the Apache Software Foundation. The Hortonworks Data Platform is Apache-licensed and completely open source. We sell only expert technical support, training and partner-enablement services. All of our technology is, and will remain, free and open source.

Please visit the Hortonworks Data Platform page for more information on Hortonworks technology. For more information on Hortonworks services, please visit either the Support or Training page. Feel free to contact us directly to discuss your specific needs.

Contents

1. Security Introduction

Understanding Data Lake Security

HDP Security Features

Administration
Authentication and Perimeter Security
Authorization
Audit
Data Protection

2. Opening and Closing the Console

3. Console Operations Summary

4. Configuring Services

Configure an HBase Service
Configure an HDFS Service
Configure a Hive Service
Configure a Kafka Service
Configure a Knox Service
Configure a Solr Service
Configure a Storm Service
Configure a YARN Service

5. Policy Manager

Create an HBase Policy
Provide User Access to HBase Database Tables from the Command Line
Create an HDFS Policy
Create a Hive Policy
Provide User Access to Hive Database Tables from the Command Line
Create a Kafka Policy
Create a Knox Policy
Create a Solr Policy
Create a Storm Policy
Create a YARN Policy

6. Users/Groups and Permissions Administration

Add a User
Edit a User
Add a Group
Edit a Group
Add or Edit Permissions

7. Reports Administration

View Reports
Search Reports

8. Auditing

View Operation Details
Access
Admin
Login Sessions
Plugins

9. Special Requirements for High Availability Environments

10. Adding a New Component to Apache Ranger

11. Developing a Custom Authorization Module

List of Tables

4.1. Service Details
4.2. Config Properties
4.3. Service Details
4.4. Config Properties
4.5. Service Details
4.6. Config Properties
4.7. Service Details
4.8. Config Properties
4.9. Service Details
4.10. Config Properties
4.11. Service Details
4.12. Config Properties
4.13. Service Details
4.14. Config Properties
4.15. Service Details
4.16. Config Properties
5.1. Policy Details
5.2. User and Group Permissions
5.3. Policy Details
5.4. User and Group Permissions
5.5. Policy Details
5.6. User and Group Permissions
5.7. Policy Details
5.8. User and Group Permissions
5.9. Policy Details
5.10. User and Group Permissions
5.11. Policy Details
5.12. User and Group Permissions
5.13. Policy Details
5.14. User and Group Permissions
5.15. Knox User and Group Permissions
5.16. Policy Details
5.17. User and Group Permissions
8.1. Search Criteria
8.2. Search Criteria
8.3. Search Criteria
8.4. Agents Search Criteria