Prerequisites

Before you configure the Ranger ABFS plugin, ensure that your environment meets the following requirements.

Azure requirements

Ensure that you have:

  • An Azure storage account with hierarchical namespace (HNS) enabled.

  • At least one Microsoft Entra application and its associated service principal for the administrator role.

  • The Storage Blob Data Owner role assigned to the service principal at the storage account level or for every container that Ranger manages.

The Storage Blob Data Contributor role is insufficient for the administrator service principal. The Ranger ABFS plugin must be able to read and update POSIX ACLs.

Ranger requirements

Map the Microsoft Entra object IDs in GUID format to Ranger users that you want to reference in ABFS policies.

  Last updated