title	Enterprise Security Package for Azure HDInsight
description	Learn the Enterprise Security Package components and versions in Azure HDInsight.
ms.service	azure-hdinsight
ms.topic	overview
author	hareshg
ms.author	hgowrisankar
ms.reviewer	nijelsf
ms.date	09/06/2024

Enterprise Security Package for Azure HDInsight

Enterprise Security is an optional package that you can add on your HDInsight cluster as part of create cluster workflow.

Note

Enterprise Security Package for HDInsight is retiring, and will reach end of support by July 31, 2026.

The Enterprise Security Package supports:

Integration with Active Directory for authentication.

In the past, you created HDInsight clusters with local admin user and local SSH user. The local admin user can access all the files, folders, tables, and columns. With Enterprise Security Package, you enable Azure role-based access control by integrating HDInsight with your Microsoft Entra Domain Services.

For more information, see:
Authorization for data
- Integration with Apache Ranger for authorization for Hive, Spark SQL, and Yarn Queues.
- You can set access control on files and folders.
  
  For more information, see Configure Apache Hive policies in Domain-joined HDInsight
View the audit logs to monitor accesses and the configured policies.

Supported cluster types

Currently, only the following cluster types support the Enterprise Security Package:

The Enterprise Security Package supports using Azure Data Lake Storage as both the primary storage and the add-on storage.

For information on pricing and SLA for the Enterprise Security Package, see HDInsight pricing.