Enterprise Security Package for Azure HDInsight
Enterprise Security is an optional package that you can add on your HDInsight cluster as part of create cluster workflow. The Enterprise Security Package supports:
Integration with Active Directory for authentication.
In the past, you created HDInsight clusters with local admin user and local SSH user. The local admin user can access all the files, folders, tables, and columns. With Enterprise Security Package, you enable Azure role-based access control by integrating HDInsight with your Microsoft Entra Domain Services.
For more information, see:
Authorization for data
Integration with Apache Ranger for authorization for Hive, Spark SQL, and Yarn Queues.
You can set access control on files and folders.
For more information, see Configure Apache Hive policies in Domain-joined HDInsight
View the audit logs to monitor accesses and the configured policies.
Supported cluster types
Currently, only the following cluster types support the Enterprise Security Package:
- Interactive Query
Support for Azure Data Lake Storage
The Enterprise Security Package supports using Azure Data Lake Storage as both the primary storage and the add-on storage.
Pricing and service level agreement (SLA)
For information on pricing and SLA for the Enterprise Security Package, see HDInsight pricing.