Hi,   do you have apache ranger installed ? if yes, check that the right policies are added under yarn service and the ranger user sync service is configured and  syncing AD users and groups.   Best Regards ... View more