Hadoop user isolation

The regular behavior of DSS is to run as a single UNIX account on its host machine (let’s call it dssuser). When a DSS end-user executes an Hadoop recipe or notebook, it runs on the cluster as the dssuser Hadoop user.

DSS supports an alternate mode of deployment, called user isolation. In this mode, DSS will impersonate the end-user and run all user-controlled code under a different identity than the dssuser user.

For more information, please see User Isolation Framework on HAdoop