Hi Sampath and thanks for your time. I've the following already set: hadoop.security.key.provider.path=kms://http@de-fra-hadmaster01.mydomain.net:9292/kms dfs.encryption.key.provider.uri=kms://http@de-fra-hadmaster01.mydomain.net:9292/kms hadoop.kms.proxyuser.hive.hosts=* hadoop.kms.proxyuser.hive.users=* so in fact I've added only hadoop.kms.proxyuser.hive.groups and set it to * as you suggested. Restarted all RangerKMS and Hive but nothing changed. 😞 ... View more