Component level Access in NiFi

[#1]

Hello

I have a scenario where I am getting confused,

- I have Secured 3 node NiFi cluster [Kerberos]

- Logged in as user 'admin' trying to do file-based authorization with out Ranger

- Created a Process group named Group1 --> 5 processors with in the group

- Set modify privilege on just GetSFTP processor for user 'john' in the Group1.

- Once I set the privilege for GetSFTP, entire process group is allocated with the modify access for john, not just GetSFTP processor.

I am thinking this is not an expected behavior, someone experienced this before?

Thanks,

Jobin George

[#2]

Hi @mclark,

Thanks for the reply and for time you spend on zoom. It was confusing that when i make a change in the component it gets added to the Parent group if i don't override, which was some kind of reverse inheritance. The message said only below which made me think there is something wrong:

"Showing effective policy inherited from Process Group Group1. Override this policy."

Thanks Again for clarifying !!