Impersonation in MapR

Describes how to give the mapr super user centralized control of the cluster.

Impersonation, also known as identity assertion, is one user (the mapr super user) accessing data and submitting jobs on behalf of another user. Impersonation in MapR allows centralized control of access to resources in the MapR-FS, MapR-DB, and HBase systems.

Implementing impersonation provides authoritative, end-to-end security for your MapR installation, independent of remote authentication and security mechanisms that control user access to application features.

To implement impersonation in MapR, there are both MapR core and ecosystem component requirements that must be met. as well as requirements at the application development level. These requirements are described in Access Control and Impersonation in MapR.

When all other requirements are met, enabling impersonation for the mapr superuser is a simple task.