How does Kyuubi authorize different users with submarine/spark security?

[turtoise]

My environment is kyuubi+kerberos+ranger.

I use submarine/spark security to authorize spark sql with ranger, it is ok.
but once I configured the parameters in kyuubi-defaults.conf like below:

kyuubi.authentication=KERBEROS
kyuubi.kinit.principal=hive_test/client-209.edp@HADOOP.COM
kyuubi.kinit.keytab=/etc/security/keytabs/hive_test.keytab

It seems that i can authorize only one user hive_test through ranger, although I can authenticate different users use kerberos at client .
Is there any method can achieve to authorize different users by client ?