To authenticate who or what can access data stored, Azure Data Lake Store uses Azure Active Directory to know what the current entity accessing data is. To authorize it, it leverages both role-based access control (RBAC), to secure the resource itself, and POSIX ACL to secure data.
It is important to understand the distinction between these two terms:
- Authentication: This determines who or what tries to access a particular resource.
- Authorization: This secures a resource by limiting access to it to those who have been assigned a particular set of permissions.
It is important to remember that if you have multiple subscriptions hosting different resources that would like to access Azure Data Lake Store, ...
