Hortonworks Docs
»
Data Platform 3.0.0
»
Providing Authorization with Apache Ranger
Providing Authorization with Apache Ranger
Also available as:
Using Ranger to Provide Authorization in Hadoop
Ranger Policies Overview
Ranger Tag-Based Policies
Tags and Policy Evaluation
Apache Ranger Access Conditions
Using the Ranger Console
Opening and Closing the Ranger Console
Ranger Console Navigation
Resource-Based Services and Policies
Configuring Resource-Based Services
Configure a Resource-based Service: HBase
Configure a Resource-based Service: HDFS
Configure a Resource-based Service: Hive
Configure a Resource-based Service: Kafka
Configure a Resource-based Service: Knox
Configure a Resource-based Service: Solr
Configure a Resource-based Service: Storm
Configure a Resource-based Service: YARN
Configure a Resource-based Service: Atlas
Configuring Resource-Based Policies
Configure a Resource-based Policy: HBase
Configure a Resource-based Policy: HDFS
Configure a Resource-based Policy: Hive
Configure a Resource-based Policy: Kafka
Configure a Resource-based Policy: Knox
Configure a Resource-based Policy: Solr
Configure a Resource-based Policy: Storm
Configure a Resource-based Policy: YARN
Configure a Resource-based Policy: Atlas
Wildcards and Variables in Resource-based Policies
Importing and Exporting Resource-Based Policies
Import Resource-Based Policies for a Specific Service
Import Resource-Based Policies for All Services
Export Resource-Based Policies for a Specific Service
Export All Resource-Based Policies for All Services
Row-level Filtering and Column Masking in Hive
Row-level Filtering in Hive with Ranger Policies
Dynamic Resource-Based Column Masking in Hive with Ranger Policies
Dynamic Tag-Based Column Masking in Hive with Ranger Policies
Tag-Based Services and Policies
Adding a Tag-based Service
Adding Tag-Based Policies
Using Tag Attributes and Values in Ranger Tag-Based Policy Conditions
Adding a Tag-Based PII Policy
Tag Policy Default EXPIRES ON Policy
Importing and Exporting Tag-Based Policies
Import Tag Based Policies
Export Tag-Based Policies
Create a Time-bound Policy
Administering Ranger Users/Groups and Permissions
Add a User
Edit a User
Delete a User
Add a Group
Edit a Group
Delete a Group
Add/Edit Permissions
Administering Ranger Reports
View Ranger Reports
Search Ranger Reports
Export Reports
Editing Ranger Policies from the Reports Page
Adding a New Component to Apache Ranger
Configuring Advanced Authorization Settings
Developing a Custom Authorization Module
Special Requirements for High Availability Environments
Configure Advanced Usersync Settings
Configure User Sync LDAP SSL
Set Up Database Users Without Sharing DBA Credentials
Updating Ranger Admin Passwords
Ranger Password Requirements
Tag-Based Services and Policies
Ranger enables you to create tag-based services and add access policies to those services.
Adding a Tag-based Service
How to add a new tag-based service to Ranger.
Adding Tag-Based Policies
Tag-based policies enable you to control access to resources across multiple Hadoop components without creating separate services and policies in each component. You can also use Ranger TagSync to synchronize the Ranger tag store with an external metadata service such as Apache Atlas.
Importing and Exporting Tag-Based Policies
You can export and import policies from the Ranger Admin UI for cluster resiliency (backups), during recovery operations, or when moving policies from test clusters to production clusters. You can export/import a specific subset of policies (such as those that pertain to specific resources or user/groups) or clone the entire repository (or multiple repositories) via Ranger Admin UI.
© 2012–2019, Hortonworks, Inc.
Document licensed under the
Creative Commons Attribution ShareAlike 4.0 License
.
Hortonworks.com
|
Documentation
|
Support
|
Community