DocsHortonworks Data Platform
Use Knox Gateway ACLs to restrict access to Hadoop services.
Group membership is determined by the identity-assertion parameter group.principal.mapping, see Mapping Users to Groups and/or by the group field of an SSO authenticated request, see Setting up a Federation Provider for SSO.
identity-assertion
group.principal.mapping
Search Highlighter (On/Off)