For this article let’s take the supposition that we have a MDM Software handling the enterprise organization. When we add/change an item in a MDM, it goes throw a workflow (validation, dedup, etc…). For synchronizing in real-time to Ranger “Users and Policies Management” the last action on the workflow must be publishing to a broker the information, that can be a JMS based broker(AMQ, RabbitMQ etc ..) or Kafka. Putting the message into a broker gives you the safety of never losing the event.We use HDF to consume, built the payload and call Ranger API. 13472-screen-shot-2017-03-09-at-180115.png List of hidden Ranger useful API's. To invoke the API's curl -u admin:admin -v -i -s -X POST -H "Accept: application/json" -H "Content-Type: application/json" http://<IP>:6080/service/xusers/secure/users -d @<FILE_PATH> curl -u admin:admin -v -i -s -X GET http://<IP>:6080/service/xusers/users curl -u admin:admin -v -i -s -X DELETE http://xxx:6080/service/xusers/secure/users/$ID_USER Create a user http://<IP>:6080/service/xusers/secure/users Update a user http://<IP>:6080/service/xusers/secure/users/{id} Delete a user http://<IP>:6080/service/xusers/users/userName/{userName} Create a group http://<IP>:6080/service/xusers/secure/groups Update a group http://<IP>:6080/service/xusers/secure/groups/{id} Delete a group http://<IP>:6080/service/xusers/groups/groupName/{groupName} For Policies API there is a good documentation directly on the Apache Ranger documentation https://cwiki.apache.org/confluence/display/RANGER/REST+APIs+for+Service+Definition%2C+Service+and+Policy+Management Others useful API's Get a particular group by name http://<IP>:6080/service/xusers/groups?name=ha Get particular group details http://<IP>:6080/service/xusers/groups/{id} Get a user's Count http://<IP>:6080/service/xusers/users/count Get particular group details http://<IP>:6080/service/xusers/groups/{id} ... View more