title: Define a Kerberos principal name for Schema Registry
body: <p>I've activated SASL for my Kafka brokers. Schema Registry needs to be authenticated to connect to Kafka. <a href="https://docs.confluent.io/platform/current/schema-registry/security/index.html" rel="nofollow noreferrer">Here</a> it says <em>&quot;If you enable Kafka authorization, you must grant the Schema Registry service principal the ability to perform the following operations on the specified resources:&quot;</em> How do I define a principal?</p>
  <p><a href="https://docs.confluent.io/3.1.1/schema-registry/docs/config.html#schemaregistry-config" rel="nofollow noreferrer">There is</a> a configuration <code>kafkastore.sasl.kerberos.service.name</code> but I'm not sure how to use it. Looks like it only needs a role or something, instead of a username password pair.</p>