4.2. Examples of Group Mapping

The following example indicates that all (*) users are members of the “users” group and that users sam, dwayne, and brenda are all members of the admins group and only joe is in the analysts group.

<provider>
    <role>identity-assertion</role>
    <name>Pseudo</name>
    <enabled>true</enabled>
    <param>
       <name>principal.mapping</name>
       <value>guest,alice=hdfs;mary=hive</value>
    </param>            
    <param>
       <name>group.principal.mapping</name>
       <value>*=users;sam,dwayne,brenda=admins;joe=analysts</value>
    </param>
</provider>

	Important
	For additional examples of user and group mappings, see the Apache Knox User Guide.