Hi @MaraWang   please work with AD team to enusre the bind user have required rights (add, delete and modify) in order to do required actions in AD using the user. And you can refer the KB article below to have additional permission for all machine accounts ("objectclass=computer") associated with the cluster hosts. KB article : https://my.cloudera.com/knowledge/Cloudera-Customer-Advisory-590-Microsoft-AD-November-2021?id=350255 ... View more

 Hi @Chetankumar , the mentioned configs are related to user group mapping in HDFS. May I know if yo have enabled these? Also do you want to change the bind user or only the searchbase? ... View more

I don't see any error related to authorization here, is ranger authorization disabled for HMS? ... View more

Hi @HadoopHero, can you please check if ranger impala plugins are syncing. go to ranger UI--> audit--> plugin status --> search for impala and attach screenshot ... View more

Hi @Lorenzo , can you please recheck ranger.usersync.group.memberattributename if it is member or memberof? ... View more

Hi @Guiimon , Can we mark this as closed? ... View more

Hi @kamiled , Can you check if any similar policy exist like similar path, Database and same access in the policy id 18 as well, Please provide the screenshot of policy 18 and policy 205 and how what permissions you are trying to update on policy 205 ... View more

Hello Kamiled, May I know how are you updating the policy? are you using post or put call? Please follow the below link. https://cwiki.apache.org/confluence/display/RANGER/REST+APIs+for+Policy+Management#RESTAPIsforPolicyManagement-PolicyAPI's ... View more

Hi @Choolake, You can check the policy version when was it updated and what updates were done to previous version ... View more