Through configuration, Apache Ranger enables both Ranger policies and HDFS permissions to be checked for a user request. When the NameNode receives a user request, the Ranger plugin checks for policies set through the Ranger Policy Manager. If there are no policies, the Ranger plugin checks for permissions set in HDFS.
We recommend that permissions be created at the Ranger Policy Manager, and to have restrictive permissions at the HDFS level.
To add a policy to an HDFS repository,use the HDFS Add Policy form.
HDFS Policy Creation Console
