Trino Resource Groups Overview

Trino supports directory-based authentication and resource group assignment to control how queries use cluster resources. Users authenticate through a directory service, such as OpenLDAP or Active Directory, and their directory group membership determines the Trino resource group to which their queries are assigned.

The configuration involves the following flow:

Directory user → Directory group → Trino resource group → Query execution

Resource groups enable you to define limits for memory usage, concurrent queries, and queued queries for different groups of users.

This guide uses OpenLDAP as an example. You can also configure Active Directory or another LDAP-compatible directory service by updating the directory-specific connection and group-mapping settings.

Prerequisites

Before you begin, ensure that:

• Trino can connect to the LDAP or LDAPS endpoint.

• Users and groups are configured in the directory service.

• A service account with directory search permissions is available.

• You have access to the Trino coordinator configuration files.

For production environments, use LDAPS and securely manage directory credentials.