Hi @upadhyayk04, I'm assigning the roles through this - <name>ranger.usersync.group.based.role.assignment.rules</name> <value>ROLE_SYS_ADMIN:g:ranger_admin_group&ROLE_ADMIN_AUDITOR:g:ranger_support_group</value> </property> A user would be part of the ranger_support group day-to-day but when a change to a policy is required they would get added to the ranger_admin group but as it stands they they would then need to get themselves taken out of the support group in order to get the admin access to make the change and then added back in after. Is this the expected behaviour?
... View more
