Working with ACLs

In the previous section, we covered a basic overview of ACLs and how to enable ACLs in a Hadoop-YARN cluster. In this section, we'll discuss in depth the implementation of ACLs and the different types of ACLs available for YARN.

Defining an ACL value

ACLs define the authorization rules for an object in a YARN. A cluster administrator can specify a list of users and groups authorized to access the object. It is a comma-separated list of both users and groups. These two lists (users and groups) are separated by a space:

• user1,user2,user3 group1: The above ACL value specifies that user1, user2, user3 and other users belonging to group1 are authorized to access the object
• user1,user2: If you want to authorize only a specific list of users and do not want any group to access the object, then you can define a list of users with a space at the end
• group1,group2: Similarly, if you wish to authorize a list of users belonging to specified groups and no other user to access the object...