HDP Security Administration tools allow you to audit activity and enforce access policies for up to ten different Hadoop clusters. Access Policies and Audited events are created and stored in the HDP Security Administration server and pushed to Security Agents installed on Hadoop cluster nodes.
The Security Agents integrate with data services in the Hadoop cluster to enforce access policies and audit activity. The agents are installed on cluster nodes as follows:
HDFS Security Agent is installed on the NameNode host and in HA (High Availability) clusters also on the stand-by NN.
Hive Security Agent is installed on the HiveServer2 host.
HBase Security Agents are installed on each HBase Master and Region Server host.
