Comparison between Apache Sentry and Apache Ranger based on features offered by them:   Feature Apache Sentry Apache Ranger Role-Based Access Control [RBAC] Yes Yes Deny Support No Yes Admin Web User Interface No Yes REST API Support No Yes CLI Support Yes No Audits Support No Yes Plugins Supported Impala, Hive, HDFS, Solr, Kafka Impala, Hive, HDFS, Solr, Kafka, HBase, Knox, Yarn, Storm, etc Tag-based policy No Yes Row Level Filtering No Yes Column Masking No Yes HDFS ACL Sync Yes No [Will be supported in upcoming CDP releases]   As we can see Apache Ranger supports more features like tag-based policy, row-level filtering, column masking, audits, admin web interface, more services, or plugins in CDP stack, and that's why its the default choice for the authorization service in CDP.   For more detailed comparison see this article by @EricL  https://www.ericlin.me/2020/01/introduction-to-apache-ranger-part-i/  ... View more