Page History

...

By default all principals that don't have an explicit acl that allows access for an operation to a resource are denied. In rare cases where an allow acl is defined that allows access to all but some principal we will have to use the --deny-principals and --deny-host option. For example, If if we want to allow all users to Read from Test-topic but only deny User:BadBob from host bad-host we can do so using following commands:

...

Above examples add acls to a topic by specifying --topic <topic-name> as the resource option. Similarly user can add acls to cluster by specifying --cluser cluster and to a consumer group by specifying --consumer-group <group-name>.

...