Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Apache Ranger or Apache Sentry?

avatar
New Contributor

How is data quality managed?Which tool should be used for Hadoop security - Apache Ranger or Apache Sentry?

1 ACCEPTED SOLUTION

avatar
Master Mentor
hide-solution

This problem has been solved!

Want to get a detailed solution you have to login/registered on the community

Register/Login
2 REPLIES 2

avatar
Master Mentor
hide-solution

This problem has been solved!

Want to get a detailed solution you have to login/registered on the community

Register/Login

avatar
Cloudera Employee

Comparison between Apache Sentry and Apache Ranger based on features offered by them:

 

FeatureApache SentryApache Ranger
Role-Based Access Control [RBAC]YesYes
Deny SupportNoYes
Admin Web User InterfaceNoYes
REST API SupportNoYes
CLI SupportYesNo
Audits SupportNoYes
Plugins SupportedImpala, Hive, HDFS, Solr, KafkaImpala, Hive, HDFS, Solr, Kafka, HBase, Knox, Yarn, Storm, etc
Tag-based policyNoYes
Row Level FilteringNoYes
Column MaskingNoYes
HDFS ACL SyncYesNo [Will be supported in upcoming CDP releases]

 

As we can see Apache Ranger supports more features like tag-based policy, row-level filtering, column masking, audits, admin web interface, more services, or plugins in CDP stack, and that's why its the default choice for the authorization service in CDP.

 

For more detailed comparison see this article by @EricL 

https://www.ericlin.me/2020/01/introduction-to-apache-ranger-part-i/