A couple of settings need to be added so that Hive can impersonate other users

The following settings should be added

This goes in hive site.

<property>
<name>hive.server2.enable.doAs</name>
<value>true</value>
</property>

These go in core-site.xml. Replace ABC with the kerberos users.
<property>
<name>hadoop.proxyuser.ABC.groups</name>
<value>*</value>
</property>

<property>
<name>hadoop.proxyuser.ABC.hosts</name>
<value>*</value>
</property>