How do Ranger YARN policies work?

[#1]

What is the default/fallback strategy for Ranger ACLs with YARN? Are the Ranger ACLs working in a hierarchical fashion as the plain YARN ACLs?

[#2 · Accepted solution]

For Ranger YARN policies to be in affect you can turn off YARN ACLs

• Ambari > YARN > Custom ranger-yarn-security > add below property and restart YARN
  • ranger.add-yarn-authorization = false

https://github.com/abajwa-hw/security-workshops/blob/master/Setup-ranger-23.md#yarn-audit-exercises-...

I looked in the official docs but I did not see this mentioned

[#3]

@hkropp

See this

https://community.hortonworks.com/articles/10797/apache-ranger-and-yarn-setup-security.html