Restricting Job Submission Access

[Theocharis Ian Athanasakis]

What's the recommended way to restrict access to job submissions and
HDFS access, besides a firewall?

Thanks,

Ian.