Configure the Azure Environment

Enable Hierarchical Namespace

ADLS ACLs require hierarchical namespace (HNS), also known as Data Lake Storage Gen2.

If HNS is disabled for the storage account, enable it before you configure the Ranger ABFS plugin.

If blob and container soft delete are enabled, disable them before you migrate the storage account to HNS:

az storage account blob-service-properties update \ --account-name <account-name> \ -g <resource-group> \ --enable-delete-retention false \ --enable-container-delete-retention false

Validate the storage account before you enable HNS:

az storage account hns-migration start \ --type validation \ -n <account-name> \ -g <resource-group>

Enable HNS:

az storage account hns-migration start \ --type upgrade \ -n <account-name> \ -g <resource-group>

Verify that HNS is enabled:

az storage account show \ --name <storage-account> \ --resource-group <resource-group> \ --query isHnsEnabled \ -o tsv

The expected output is:

true

This command uses the Azure management plane and requires Reader access. Data-plane ACL operations can continue to work even if this command is unauthorized.

Last updated on Aug 31, 2026

Was this page helpful?