Configure the Ranger ABFS Service

Create a Ranger ABFS service for the Azure storage account.

  1. In the Ranger UI, go to Service Manager > ABFS Service.

  2. Click + to create a service.

  3. Configure the following properties:

Property

Description

Username

Microsoft Entra object ID to add to the generated default policy with read and list access.

storageAccount

Storage account name without .dfs.core.windows.net.

tenantId

Microsoft Entra directory (tenant) ID.

clientId

Application (client) ID of the Microsoft Entra application. Azure CLI also returns this value as appId.

clientSecret

Client secret Value. Do not use the Secret ID.

defaultContainer

Container used for connection testing and default policy configuration.

Specify Ranger users and groups in ABFS policies as Microsoft Entra object IDs in GUID format. The plugin validates the GUID format and uses the value directly as the ACL entity ID. Invalid or non-GUID principals are skipped or can cause the operation to fail.

  1. Test the service connection.

  2. Verify that the connection succeeds.

  1. Save the service.

Ranger creates a default policy with the default Azure ACL permissions for all containers in the storage account.

  Last updated on Aug 31, 2026
Next to read:
Create Ranger ABFS Policies
null
On This Page
Configure the Ranger ABFS Service