Skip to content

The open source, community owned authorization framework for
data processing platforms

Apache Ranger is an open source framework that helps you enable, monitor and manage comprehensive data security for your applications

Install Ranger View on GitHub

Goals Overview

  • Centralized security administration to manage all authorization related tasks in a central UI or using REST APIs.
  • Fine-grained authorization to do a specific action and/or operation with 20+ data processing services and managed through a central administration tool.
  • Standardized authorization method across different data processing services.
  • Enhanced support for different authorization methods like:
    • Role based access control (RBAC)
    • Attribute based access control (ABAC)
    • Tag based access control (TBAC)
  • Centralized auditing of user access and administrative actions (security related) for all services.

Find your way around

  • Getting started

    What Ranger is, how to run it with Docker, and a first policy walkthrough.

    Introduction

  • Architecture

    Components, data flows, the policy model and how plugins enforce policies inside each service.

    Overview

  • Plugins

    Integration guides for Polaris, Trino, Ozone, Kafka, Hive, HDFS and every other supported service.

    Plugin overview

  • Services

    Install, configure and operate Ranger Admin, UserSync, TagSync, KMS, PDP and the audit pipeline.

    Ranger Admin

  • Features

    Resource and tag policies, masking and row filtering, ABAC, roles, security zones and data sharing.

    Policies

  • Developer guide

    Build from source, call the REST API, embed the authorization API and write custom plugins.

    Building from source

  • Releases

    Release notes for every version, download locations and how to verify signatures.

    Releases

  • Project

    How to contribute, community channels, security policy and the release process.

    Contributing