question Ranger authorization through groups in Archives of Support Questions (Read Only)

Ranger authorization through groups

rsg — Mon, 27 Aug 2018 21:23:14 GMT

Hello,

I have been able to connect properly Ranger to AD with LDAPS.

Currently syncing all the users requires a huge amount of time, currently 4+ hours for the initial sync. What are the available options to reduce this time?
Regarding the access to Ranger UI, is it possible to assign roles to groups instead of users?

Thanks

Re: Ranger authorization through groups

stevenmatison — Wed, 29 Aug 2018 19:48:50 GMT

@Raffaele S

Use Group Sync portion of Ranger User Sync. Dialing into a specific group match should reduce the sync time, especially if your LDAPS contains thousands of users who do not need to be authorized in your cluster.

Yes, with Ranger Admin UI it is possible to assign roles to groups, users, and tags.

If this answer is helpful please click ACCEPT to mark the question as resolved.