# Secure Apache Airflow Using Customer Security Manager

DevFeed: [Secure Apache Airflow Using Customer Security Manager](<https://devfeed.tech/articles/secure-apache-airflow-using-customer-security-manager-15839.md>)

Original publisher: [Read original article](<https://developer.squareup.com/blog/secure-apache-airflow-using-customer-security-manager>)

Author: Yifei Sun

Published: 2022-01-19T20:00:00Z

Content type: tutorial

Language: en

Sources: [Square Corner Blog RSS Feed](<https://devfeed.tech/sources/square-corner-blog-rss-feed.md>)

Topics: [airflow](<https://devfeed.tech/topics/airflow.md>), [Security](<https://devfeed.tech/topics/security.md>), [Access Control](<https://devfeed.tech/topics/access-control.md>), [Orchestration](<https://devfeed.tech/topics/orchestration.md>), [Multitenancy](<https://devfeed.tech/topics/multitenancy.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [airflow](<https://devfeed.tech/tags/airflow.md>), [apache](<https://devfeed.tech/tags/apache.md>), [authz](<https://devfeed.tech/tags/authz.md>), [data-science](<https://devfeed.tech/tags/data-science.md>), [http](<https://devfeed.tech/tags/http.md>), [multi-tenancy](<https://devfeed.tech/tags/multi-tenancy.md>), [security](<https://devfeed.tech/tags/security.md>), [web](<https://devfeed.tech/tags/web.md>)

## AI overview

This article describes Square's security requirements for running Apache Airflow in a multi-tenant environment. It explains using a human proxy to pass user identities and capabilities to the Airflow web console through HTTP headers, supporting automatic login and role- and DAG-level access control without offline permission synchronization.

## Source excerpt

Leverage a human proxy to auto log users in airflow web console