# Alternative solution to Apache ranger or keycloack for dremio with iceberg
**URL:** https://community.dremio.com/t/alternative-solution-to-apache-ranger-or-keycloack-for-dremio-with-iceberg/11563
**Category:** Uncategorized
**Created:** [February 27, 2024, 1:33pm UTC](https://community.dremio.com/t/alternative-solution-to-apache-ranger-or-keycloack-for-dremio-with-iceberg/11563 "2024-02-27T13:33:28Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@Hamzabouazza](https://community.dremio.com/u/Hamzabouazza)
#### Post date: [February 27, 2024, 1:33pm UTC](https://community.dremio.com/t/alternative-solution-to-apache-ranger-or-keycloack-for-dremio-with-iceberg/11563/1 "2024-02-27T13:33:29Z")
I’m trying to build an architecture data lakehouse, Please can you provide me an alternative solution for Apache Ranger which is in Cloudera, Because I found that Dremio with Apache Iceberg doesn’t support Apache Ranger and also keycloak.
---
### Author:  [@balaji.ramaswamy](https://community.dremio.com/u/balaji.ramaswamy)
#### Post date: [March 3, 2024, 1:46am UTC](https://community.dremio.com/t/alternative-solution-to-apache-ranger-or-keycloack-for-dremio-with-iceberg/11563/2 "2024-03-03T01:46:03Z")
@Hamzabouazza Ranger is something that works with HDFS, Dremio does support ranger authentication and have many use cases in Parquet and the file format should not matter. What is the error you are facing?
---
### Author:  [@Hamzabouazza](https://community.dremio.com/u/Hamzabouazza)
#### Post date: [March 8, 2024, 12:09pm UTC](https://community.dremio.com/t/alternative-solution-to-apache-ranger-or-keycloack-for-dremio-with-iceberg/11563/3 "2024-03-08T12:09:27Z")
I am not utilizing HDFS as a file storage solution. instead, I have opted for Minio S3 as an object storage. I don’t know if there is a way to use Ranger authentification with dremio and Minio S3 storage. And as a table format I have Apache iceberg .
Thank you for your time,
---
### Author:  [@balaji.ramaswamy](https://community.dremio.com/u/balaji.ramaswamy)
#### Post date: [March 9, 2024, 6:03pm UTC](https://community.dremio.com/t/alternative-solution-to-apache-ranger-or-keycloack-for-dremio-with-iceberg/11563/4 "2024-03-09T18:03:01Z")
@Hamzabouazza Ranger is built for Hadoop and if you are on S3 then it should be EMR.
[https://ranger.apache.org/](https://ranger.apache.org/)
---
### Author:  [@Hamzabouazza](https://community.dremio.com/u/Hamzabouazza)
#### Post date: [March 10, 2024, 12:33am UTC](https://community.dremio.com/t/alternative-solution-to-apache-ranger-or-keycloack-for-dremio-with-iceberg/11563/5 "2024-03-10T00:33:41Z")
> [@balaji.ramaswamy](#):
>
> EMR.
Thank you for your response; I appreciate it. If I understood correctly, there is no way to use Apache Ranger with S3. So, my question is, what is the alternative solution for Apache Ranger to ensure the security of my data lakehouse stack, which includes Minio S3, Dremio, Apache Iceberg, and Nessie? I am trying to build the solution on-premises.
EMR for cloud.
---
### Author:  [@balaji.ramaswamy](https://community.dremio.com/u/balaji.ramaswamy)
#### Post date: [March 10, 2024, 8:04pm UTC](https://community.dremio.com/t/alternative-solution-to-apache-ranger-or-keycloack-for-dremio-with-iceberg/11563/6 "2024-03-10T20:04:41Z")
@Hamzabouazza Ranger is not a security product provided by dremio. If you want to set permission for users/group and buckets, that needs to be done via AWS IAM policies and S3 bucket policies
> **[IAM Policies and Bucket Policies and ACLs! Oh, My! (Controlling Access to S3...](https://aws.amazon.com/blogs/security/iam-policies-and-bucket-policies-and-acls-oh-my-controlling-access-to-s3-resources/)**
>
> September 11, 2023: This post has been updated. Updated on July 6, 2023: This post has been updated to reflect the current guidance around the usage of S3 ACL and to include S3 Access Points and the Block Public Access for accounts and S3 buckets....
---
### Author:  [@Hamzabouazza](https://community.dremio.com/u/Hamzabouazza)
#### Post date: [March 10, 2024, 8:37pm UTC](https://community.dremio.com/t/alternative-solution-to-apache-ranger-or-keycloack-for-dremio-with-iceberg/11563/7 "2024-03-10T20:37:45Z")
Thank you again for your response, but in my case I’m using Minio S3 whose on-premises and Minio policies are not directly compatible with AWS IAM policies or S3 bucket policies(AWS always on the cloud).
the reason why I asked you for Apache Ranger is because so powerful in the Cloudera platform.
I appreciate your help.
---
### Author:  [@balaji.ramaswamy](https://community.dremio.com/u/balaji.ramaswamy)
#### Post date: [March 11, 2024, 6:12am UTC](https://community.dremio.com/t/alternative-solution-to-apache-ranger-or-keycloack-for-dremio-with-iceberg/11563/8 "2024-03-11T06:12:34Z")
@Hamzabouazza You have to talk that with MinIO support. I assume MinIO will have a solution as it falls under “S3 compatible storage”
---
### Author:  [@Hamzabouazza](https://community.dremio.com/u/Hamzabouazza)
#### Post date: [March 11, 2024, 3:49pm UTC](https://community.dremio.com/t/alternative-solution-to-apache-ranger-or-keycloack-for-dremio-with-iceberg/11563/9 "2024-03-11T15:49:02Z")
> [@Hamzabouazza](#):
>
> authentification
Oki, Thank you so much !!