Apache Kafka

ACLs Commands

Kafka ACLs provide authorization for topics, consumer groups, and cluster operations. Secure your Kafka deployment with proper access control.

4 commands

Pro Tips

Use User:username format for principals in ACL commands.

List existing ACLs before adding new ones to avoid conflicts.

Without ACLs, all access is allowed. Enable authorizer for production.

$ kafka-acls.sh --list --bootstrap-server localhost:9092

List all ACLs.

$ kafka-acls.sh --add --allow-principal User:producer --producer --topic my-topic --bootstrap-server localhost:9092

Grant producer access to topic.

$ kafka-acls.sh --add --allow-principal User:consumer --consumer --topic my-topic --group my-group --bootstrap-server localhost:9092

Grant consumer access to topic and group.

$ kafka-acls.sh --remove --allow-principal User:producer --producer --topic my-topic --bootstrap-server localhost:9092

Remove access control.