Add the following content in Hadoop’s core-site.xml and restart

<property>
    <name>hadoop.proxyuser.root.groups</name>
    <value>root</value>
    <description>Allow the superuser oozie to impersonate any members of the group group1 and group2</description>
</property>


<property>
    <name>hadoop.proxyuser.root.hosts</name>
    <value>*</value>
    <description>The superuser can connect only from host1 and host2 to impersonate a user</description>
</property>