Creating a Kafka Role

Scenario

This section describes how to create and configure a Kafka role.

This section applies to MRS 3.x or later.

Users can create Kafka roles only in security mode.

If the current component uses Ranger for permission control, you need to configure permission management policies based on Ranger. For details, see Adding a Ranger Access Permission Policy for Kafka.

Prerequisites

The system administrator has understood the service requirements.

Procedure

  1. Log in to FusionInsight Manager and choose System > Permission > Role.
  2. On the displayed page, click Create Role and enter a Role Name and Description.
  3. On the Configure Resource Permission page, choose Name of the desired cluster > Kafka.
  4. Select permissions based on service requirements. For details about configuration items, see Table 1.

    Table 1 Description

    Scenario

    Role Authorization

    Setting the Kafka administrator permissions

    In the Configure Resource Permission table, choose Name of the desired cluster > Kafka > Kafka Manager Privileges.

    NOTE:

    This permission allows you to create and delete topics, but does not allow you to produce or consume any topics.

    Setting the production permission of a user on a topic
    1. In the Configure Resource Permission table, choose Name of the desired cluster > Kafka > Kafka Topic Producer And Consumer Privileges.
    2. In the Permission column of the specified topic, select Kafka Producer Permission.

    Setting the consumption permission of a user on a topic
    1. In the Configure Resource Permission table, choose Name of the desired cluster > Kafka > Kafka Topic Producer And Consumer Privileges.
    2. In the Permission column of the specified topic, select Kafka Consumer Privileges.

  5. Click OK, and return to the Role page.
Parent topic: Using Kafka