diff --git a/docs/security/authorization/spark/build.md b/docs/security/authorization/spark/build.md
index 9d6a18a5ef6..2fb043ed721 100644
--- a/docs/security/authorization/spark/build.md
+++ b/docs/security/authorization/spark/build.md
@@ -78,27 +78,16 @@ By default, it is always built with the latest `ranger.version` defined in kyuub
 Sometimes, it may be incompatible with other Ranger Admins, then you may need to build the plugin on your own targeting the Ranger Admin version you connect with.
 
 ```shell
-build/mvn clean package -pl :kyuubi-spark-authz_2.12 -am -DskipTests -Dranger.version=2.4.0
+build/mvn clean package -pl :kyuubi-spark-authz_2.12 -am -DskipTests -Dranger.version=2.8.0
 ```
 
 The available `ranger.version`s are shown in the following table.
 
-| Ranger Version | Supported |                                          Remark                                           |
-|:--------------:|:---------:|:-----------------------------------------------------------------------------------------:|
-|     2.6.x      |     √     |                                             -                                             |
-|     2.5.x      |     √     |                                             -                                             |
-|     2.4.x      |     √     |                                             -                                             |
-|     2.3.x      |     √     |                                             -                                             |
-|     2.2.x      |     √     |                                             -                                             |
-|     2.1.x      |     √     |                                             -                                             |
-|     2.0.x      |     √     |                                             -                                             |
-|     1.2.x      |     √     |                                             -                                             |
-|     1.1.x      |     √     |                                             -                                             |
-|     1.0.x      |     √     |                                             -                                             |
-|     0.7.x      |     √     |                                             -                                             |
-|     0.6.x      |     X     | [KYUUBI-4672](https://github.com/apache/kyuubi/issues/4672) reported unresolved failures. |
-
-Currently, all ranger releases are supported.
+| Ranger Version | Supported | Remark |
+|:--------------:|:---------:|:------:|
+|     2.8.x      |     √     |   -    |
+
+Please use branch-1.11 or prior to build against Ranger version prior to 2.8.0.
 
 ## Test with ScalaTest Maven plugin
 
diff --git a/extensions/spark/kyuubi-spark-authz-shaded/pom.xml b/extensions/spark/kyuubi-spark-authz-shaded/pom.xml
index c32d7265fb8..05ae521b067 100644
--- a/extensions/spark/kyuubi-spark-authz-shaded/pom.xml
+++ b/extensions/spark/kyuubi-spark-authz-shaded/pom.xml
@@ -49,8 +49,6 @@
                         <includes>
                             <include>org.apache.kyuubi:*</include>
                             <include>org.apache.ranger:*</include>
-                            <!-- RANGER-4225 (2.5.0) upgrades Jackson from 1.x to 2.x -->
-                            <include>org.codehaus.jackson:*</include>
                             <include>com.fasterxml.jackson.core:*</include>
                             <include>com.fasterxml.jackson.module:*</include>
                             <include>com.fasterxml.jackson.jaxrs:*</include>
@@ -81,10 +79,6 @@
                         </filter>
                     </filters>
                     <relocations>
-                        <relocation>
-                            <pattern>org.codehaus.jackson</pattern>
-                            <shadedPattern>${kyuubi.shade.packageName}.org.codehaus.jackson</shadedPattern>
-                        </relocation>
                         <relocation>
                             <pattern>com.fasterxml.jackson</pattern>
                             <shadedPattern>${kyuubi.shade.packageName}.com.fasterxml.jackson</shadedPattern>
diff --git a/extensions/spark/kyuubi-spark-authz-shaded/src/main/resources/META-INF/LICENSE b/extensions/spark/kyuubi-spark-authz-shaded/src/main/resources/META-INF/LICENSE
index 1e6d25e885e..bdbebc2bd69 100644
--- a/extensions/spark/kyuubi-spark-authz-shaded/src/main/resources/META-INF/LICENSE
+++ b/extensions/spark/kyuubi-spark-authz-shaded/src/main/resources/META-INF/LICENSE
@@ -207,18 +207,25 @@ This project bundles some components that are licensed under the
 
 Apache License Version 2.0
 --------------------------
+com.fasterxml.jackson.core:jackson-annotations
+com.fasterxml.jackson.core:jackson-core
+com.fasterxml.jackson.core:jackson-databind
+com.fasterxml.jackson.jaxrs:jackson-jaxrs-base
+com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
+com.fasterxml.jackson.module:jackson-module-jaxb-annotations
+com.fasterxml.jackson.module:jackson-module-scala_*
+org.apache.ranger:ranger-audit-core
+org.apache.ranger:ranger-authz-api
+org.apache.ranger:ranger-plugin-classloader
 org.apache.ranger:ranger-plugins-common
-org.apache.ranger:ranger-plugins-audit
-org.codehaus.jackson:jackson-jaxrs
-org.codehaus.jackson:jackson-core-asl
-org.codehaus.jackson:jackson-mapper-asl
-net.java.dev.jna:jna
-net.java.dev.jna:jna-platform
+org.apache.ranger:ranger-plugins-cred
+org.apache.ranger:ugsync-util
 
 Common Development and Distribution License (CDDL) 1.1
 ------------------------------------------------------
 com.sun.jersey:jersey-client
 com.sun.jersey:jersey-core
+javax.ws.rs:jsr311-api
 
 MIT license
 -----------
diff --git a/extensions/spark/kyuubi-spark-authz/README.md b/extensions/spark/kyuubi-spark-authz/README.md
index 3f34f6f181b..2ca5a4f632f 100644
--- a/extensions/spark/kyuubi-spark-authz/README.md
+++ b/extensions/spark/kyuubi-spark-authz/README.md
@@ -26,7 +26,7 @@
 ## Build
 
 ```shell
-build/mvn clean package -DskipTests -pl :kyuubi-spark-authz_2.12 -am -Dspark.version=3.5.6 -Dranger.version=2.6.0
+build/mvn clean package -DskipTests -pl :kyuubi-spark-authz_2.12 -am -Dspark.version=3.5.6 -Dranger.version=2.8.0
 ```
 
 ### Supported Apache Spark Versions
@@ -47,17 +47,18 @@ build/mvn clean package -DskipTests -pl :kyuubi-spark-authz_2.12 -am -Dspark.ver
 
 `-Dranger.version=`
 
+- [x] 2.8.x (default)
 - [ ] 2.7.x
-- [x] 2.6.x (default)
-- [x] 2.5.x
-- [x] 2.4.x
-- [x] 2.3.x
-- [x] 2.2.x
-- [x] 2.1.x
-- [x] 2.0.x
-- [x] 1.2.x
-- [x] 1.1.x
-- [x] 1.0.x
-- [x] 0.7.x
+- [ ] 2.6.x
+- [ ] 2.5.x
+- [ ] 2.4.x
+- [ ] 2.3.x
+- [ ] 2.2.x
+- [ ] 2.1.x
+- [ ] 2.0.x
+- [ ] 1.2.x
+- [ ] 1.1.x
+- [ ] 1.0.x
+- [ ] 0.7.x
 - [ ] 0.6.x
 
diff --git a/extensions/spark/kyuubi-spark-authz/pom.xml b/extensions/spark/kyuubi-spark-authz/pom.xml
index 5fd27d97140..9a29b7dc1f3 100644
--- a/extensions/spark/kyuubi-spark-authz/pom.xml
+++ b/extensions/spark/kyuubi-spark-authz/pom.xml
@@ -32,7 +32,7 @@
     <url>https://kyuubi.apache.org/</url>
 
     <properties>
-        <ranger.version>2.6.0</ranger.version>
+        <ranger.version>2.8.0</ranger.version>
         <jersey.client.version>1.19.4</jersey.client.version>
     </properties>
 
@@ -72,37 +72,17 @@
                 </exclusion>
                 <exclusion>
                     <groupId>org.apache.ranger</groupId>
-                    <artifactId>ranger-plugins-audit</artifactId>
+                    <artifactId>ranger-audit-core</artifactId>
                 </exclusion>
                 <!-- this is going to be replaced with jersey-client -->
                 <exclusion>
                     <groupId>com.sun.jersey</groupId>
                     <artifactId>jersey-bundle</artifactId>
                 </exclusion>
-                <exclusion>
-                    <groupId>log4j</groupId>
-                    <artifactId>log4j</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>ch.qos.logback</groupId>
-                    <artifactId>logback-classic</artifactId>
-                </exclusion>
                 <exclusion>
                     <groupId>org.apache.commons</groupId>
                     <artifactId>commons-configuration2</artifactId>
                 </exclusion>
-                <exclusion>
-                    <groupId>commons-logging</groupId>
-                    <artifactId>commons-logging</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>org.apache.hadoop</groupId>
-                    <artifactId>hadoop-common</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>javax.ws.rs</groupId>
-                    <artifactId>jsr311-api</artifactId>
-                </exclusion>
                 <exclusion>
                     <groupId>com.kstruct</groupId>
                     <artifactId>gethostname4j</artifactId>
@@ -115,6 +95,10 @@
                     <groupId>net.java.dev.jna</groupId>
                     <artifactId>jna-platform</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.mockito</groupId>
+                    <artifactId>mockito-core</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
 
@@ -132,7 +116,7 @@
 
         <dependency>
             <groupId>org.apache.ranger</groupId>
-            <artifactId>ranger-plugins-audit</artifactId>
+            <artifactId>ranger-audit-core</artifactId>
             <version>${ranger.version}</version>
             <exclusions>
                 <exclusion>
@@ -140,84 +124,17 @@
                     <artifactId>ranger-plugins-cred</artifactId>
                 </exclusion>
                 <exclusion>
-                    <groupId>org.apache.kafka</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>org.apache.solr</groupId>
-                    <artifactId>solr-solrj</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>org.elasticsearch</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>org.elasticsearch.client</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>org.elasticsearch.plugin</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>org.apache.lucene</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>log4j</groupId>
-                    <artifactId>log4j</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>commons-lang</groupId>
-                    <artifactId>commons-lang</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>commons-logging</groupId>
-                    <artifactId>commons-logging</artifactId>
+                    <groupId>org.apache.commons</groupId>
+                    <artifactId>commons-configuration2</artifactId>
                 </exclusion>
                 <exclusion>
                     <groupId>com.carrotsearch</groupId>
                     <artifactId>hppc</artifactId>
                 </exclusion>
-                <exclusion>
-                    <groupId>org.apache.httpcomponents</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>org.apache.hive</groupId>
-                    <artifactId>hive-storage-api</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>org.apache.orc</groupId>
-                    <artifactId>orc-core</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>org.apache.hadoop</groupId>
-                    <artifactId>hadoop-common</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>com.google.guava</groupId>
-                    <artifactId>guava</artifactId>
-                </exclusion>
                 <exclusion>
                     <groupId>joda-time</groupId>
                     <artifactId>joda-time</artifactId>
                 </exclusion>
-                <exclusion>
-                    <groupId>org.apache.logging.log4j</groupId>
-                    <artifactId>*</artifactId>
-                </exclusion>
-                <!--
-                  RANGER-4831 (2.5.0) switches from aws-java-sdk-bundle to aws-java-sdk-logs
-                  -->
-                <exclusion>
-                    <groupId>com.amazonaws</groupId>
-                    <artifactId>aws-java-sdk-bundle</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>com.amazonaws</groupId>
-                    <artifactId>aws-java-sdk-logs</artifactId>
-                </exclusion>
             </exclusions>
         </dependency>
 
@@ -232,20 +149,15 @@
                 </exclusion>
                 <exclusion>
                     <groupId>org.apache.hadoop</groupId>
-                    <artifactId>hadoop-common</artifactId>
-                </exclusion>
-                <exclusion>
-                    <groupId>log4j</groupId>
-                    <artifactId>log4j</artifactId>
+                    <artifactId>hadoop-auth</artifactId>
                 </exclusion>
-                <!-- they were removed in RANGER-3184 (2.2.0) -->
                 <exclusion>
-                    <groupId>org.eclipse.persistence</groupId>
-                    <artifactId>javax.persistence</artifactId>
+                    <groupId>org.apache.hadoop</groupId>
+                    <artifactId>hadoop-client-api</artifactId>
                 </exclusion>
                 <exclusion>
-                    <groupId>org.eclipse.persistence</groupId>
-                    <artifactId>eclipselink</artifactId>
+                    <groupId>org.apache.hadoop</groupId>
+                    <artifactId>hadoop-client-runtime</artifactId>
                 </exclusion>
             </exclusions>
         </dependency>