Read-only user on HDFS

[#1]

Dear All,

I need a read-only user (say data_backup) on HDFS for management, data backup purposes. The application backup needs to be taken from UAT cluster to DEV cluster. The application owners wants to do it by themselves rather than requesting admin team.

My cluster (HDP-2.5.0.2, ambari Version 2.4.0.1) is kerberized and users are created on linux hosts (Not LDAP). Ranger security is not enabled.

Setting ACLs is an approach.. but, is there a better way? Adding the user to some group (or) any property on hdfs-site xml etc ?

Please advise.

Thanks

[#2]

@Surya Rao

If you are using distcp for backup (which you should) then only hdfs user can do it.