// Module included in the following assemblies:
//
// assembly-kafka-authentication-and-authorization.adoc

[id='proc-kafka-authorization-{context}']
= Configuring authorization in Kafka brokers

Configure authorization and designate super users for a particular Kafka broker.

.Prerequisites

* A Kubernetes cluster
* The Cluster Operator is running

.Procedure

. Add or edit the `authorization` property in the `Kafka.spec.kafka` resource.
For example:
+
[source,yaml,subs=attributes+]
----
apiVersion: {KafkaApiVersion}
kind: Kafka
spec:
  kafka:
    # ...
    authorization:
      type: simple
      superUsers:
        - CN=fred
        - sam
        - CN=edward
    # ...
  zookeeper:
    # ...
----

. Create or update the resource.
+
This can be done using `kubectl apply`:
[source,shell,subs=+quotes]
kubectl apply -f _your-file_

.Additional resources
* For more information about the supported authorization methods, see xref:ref-kafka-authorization-{context}[authorization reference].
* For more information about the schema for `Kafka`, see xref:type-Kafka-reference[`Kafka` schema reference].
* For more information about configuring user authentication, see xref:ref-kafka-user-str[Kafka User resource].
