Table of Contents

Search

  1. About the Enterprise Data Lake Administrator Guide
  2. Introduction to Enterprise Data Lake Administration
  3. Administration Process
  4. User Account Setup
  5. Application Configuration
  6. Roles, Privileges, and Profiles
  7. Data Asset Access and Publication Management
  8. Monitoring Enterprise Data Lake
  9. Backing Up and Restoring Enterprise Data Lake
  10. Managing the Data Lake
  11. Schedule Export, Import and Publish Activities
  12. Data Preparation Service
  13. Enterprise Data Lake Service

Enterprise Data Lake Administrator Guide

Enterprise Data Lake Administrator Guide

Step 5. Set Up User Impersonation

Step 5. Set Up User Impersonation

When a user performs tasks in
Enterprise Data Lake
, the Data Integration Service connects to Hadoop services to access the data lake and perform the operation on behalf of the user. The Data Integration Service uses impersonation to pass the user account to Hadoop.
Configure user impersonation for
Enterprise Data Lake
based on the user access requirements of your organization.
You can configure user impersonation in the following ways:
Using the
Enterprise Data Lake
user account to connect to Hadoop services
You can configure the Data Integration Service to impersonate the user account logged in to the
Enterprise Data Lake
application. The user account logged in to
Enterprise Data Lake
must have user or group authorization to connect to the Hadoop services. To use this option, you must configure the Data Integration Service to use operating system profiles. You must assign the
Enterprise Data Lake
user account a default operating system profile with the
Use the logged in user as Hadoop Impersonation User
option selected.
Using an authorized user account to connect to Hadoop services
If the
Enterprise Data Lake
user accounts do not have logged authorization to connect Hadoop, you can configure the Data Integration Service to impersonate a specific authorized user. The impersonated user account must have authorization to connect to the data lake and the Hadoop services. To use this option, you must configure the Data Integration Service to use operating system profiles. The operating system profile must have the
Use the specified user as Hadoop Impersonation User
option selected and must specify the authorized user account to impersonate.
Using the Hive connection user account to connect to Hadoop services
If user access to the data lake does not require authorization or if all users have the same authorization, you do not need to set up operating system profiles to connect to the Hadoop services. The Data Integration Service connects to Hadoop services using the user account specified in the Hive connection object for
Enterprise Data Lake
.