Hello ! I have an HDP 2.3.4.7 with Ambari 2.2.1.
I enabled ranger for three plugins : - HDFS - HBase - Kafka. For each one of these plugins, in their configuration in Ambari, in the paragraph Advanced ranger-<plugin name>-plugin-properties, there is a property called : ### Policy user for <NAME OF THE PLUGIN> ### And it it set to ambari-qa by default. The thing is, when Ambari creates the repository for the specific plugin (this is now called service if I remember well), then it creates a policy with all the rights for the user ambari-qa. In the comment of the property Policy user for <NAME OF THE PLUGIN>, it said the following : ### This user must be system user and also present at ranger admin portal ### Do you know guys if it would not be better to set this property to the super admin of each of the plugin ? I mean for example, hdfs for the plugin hdfs, hbase for the plugin hbase, kafka for the plugin kafka. BR. Lune.
