Cloudera
Britive integrates with Cloudera Data Platform (CDP) through the Britive Access Broker and the Apache Ranger Admin REST API. At checkout, the broker creates a time-scoped Ranger policy granting the requesting user access to the specified HDFS paths, Hive databases, or HBase tables. At checkin, the policy is deleted.
No standing policies exist between sessions — users have access only for the duration of the checkout.
Access Patterns
- Ranger policy access — creates a Ranger policy scoped to a specific resource (HDFS path, Hive database/table, HBase table) for the requesting user at checkout; deletes it at checkin.
This integration requires Apache Ranger as the authorization engine for your Cloudera cluster. Ranger is included by default in Cloudera Data Platform (CDP) and Cloudera CDH 5.4+.
In This Section
- Getting Started
Set up the Britive Access Broker for JIT access to Cloudera Data Platform — configure the Apache Ranger Admin API, create a service account, and register your cluster as a resource.
- Ranger Policy Access
Grant JIT access to Cloudera Data Platform resources by creating a scoped Apache Ranger policy at checkout and deleting it at checkin — supports HDFS, Hive, and HBase.