Hi, kafka-acls.sh script is used to create the ACLs for kafka users. It's not used for zookeeper acl. As per design, Only broker users can modify the zookeeper nodes, Others can only read the zk nodes. This is to improve security around zookeeper. You can also use new consumer API, which does not depend Zookeeper. It is available in HDP 2.5. ps: you can upvote, If you are satisfied with my answer ... View more