Azure - Security (Ranger)

Domain user name

The domain user account that will have admin privileges on the HDInsight cluster.

It will be an admin user

• on Ambari
• as wel as Ranger

This user account should have 3 privileges:.

• i. This user should have privileges to join machines to the domain and place them within the OU.
• ii. This user should have privileges to create service principals within the OU.
• iii. This user should have privileges to create reverse DNS entries.

Example:

• [email protected].

Organisation Unit

The distinguished name of the OU. If this OU does not exist, HDInsight cluster attempts to create this OU.

For example:

OU=HDInsightOU,DC=contoso,DC=onmicrosohift,DC=com.