Thanks for the quick answer! Turns out we were missing a service block in our topology file. We had the AMBARIUI service but not AMBARI. Adding <service> <role>AMBARI</role> <url>http://ambari1.testhost.com:8080</url> </service> To our topology file and restarting Knox did the trick. Originally, we followed this article: https://community.hortonworks.com/articles/78361/configure-knox-to-access-ambari-ui.html which doesn't mention the service blocks you just pointed out. It would be interesting to fix the article so that other users don't face the same issue. ... View more

Glad it worked for you. For Knox plugin, first time policy download happens upon first Knox request. After that any policy modifications should be sync'ed by Knox plugin within 30 seconds. i.e. Every 30 seconds, Knox plugin checks for policy updates from Ranger Admin server. If your issue is resolved, please accept the answer. ... View more