Hello, thank you for your question:   1) Within Cloudera Navigator, you can apply metadata and tagging via the Navigator UI or the Navigator API.  Please see the below links for each: https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/cn_iu_metadata_modify.html#xd_583c10bfdbd326ba--43d5fd93-1410993f8c2--7f69 https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/cn_nav_hive-hdfs_api.html#tag_hive_hdfs_json_apis   2) Apache Sentry provides only Role Based Access Control (RBAC) policies.  Creating access policies based off of metadata and tags is more commonly referred to as Attribute Based Access Control (ABAC).  Navigator+Sentry in CDH6.3 does not provide ABAC functionality.  You will need Atlas and Ranger available in CDP which can support both RBAC and ABAC policies.  Please see an overview of ABAC in this Cloudera Youtube video on ABAC. ... View more