forked from docs/doc-exports
Yang, Tong
3f5759eed2
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-authored-by: Yang, Tong <yangtong2@huawei.com> Co-committed-by: Yang, Tong <yangtong2@huawei.com>
27 lines
11 KiB
HTML
27 lines
11 KiB
HTML
<a name="mrs_01_1714"></a><a name="mrs_01_1714"></a>
|
|
|
|
<h1 class="topictitle1">Creating a HetuEngine User</h1>
|
|
<div id="body32001227"><div class="section" id="mrs_01_1714__en-us_topic_0000001173789934_section3113133152911"><h4 class="sectiontitle">Scenarios</h4><p id="mrs_01_1714__en-us_topic_0000001173789934_p1485624111018">Before using the <span id="mrs_01_1714__en-us_topic_0000001173789934_text94721168212">HetuEngine</span> service in a security cluster, a cluster administrator needs to create a user and grant operation permissions to the user to meet service requirements.</p>
|
|
<p id="mrs_01_1714__en-us_topic_0000001173789934_p1020412424420"><span id="mrs_01_1714__en-us_topic_0000001173789934_text1065344219412">HetuEngine</span> users are classified into administrators and common users. The default <span id="mrs_01_1714__en-us_topic_0000001173789934_text352132816392">HetuEngine</span> administrator group is <strong id="mrs_01_1714__en-us_topic_0000001173789934_b84791716133515">hetuadmin</strong>, and the user group of <span id="mrs_01_1714__en-us_topic_0000001173789934_text135218284399">HetuEngine</span> common users is <strong id="mrs_01_1714__en-us_topic_0000001173789934_b12681327143515">hetuuser</strong>.</p>
|
|
<ul id="mrs_01_1714__en-us_topic_0000001173789934_ul14431750375"><li id="mrs_01_1714__en-us_topic_0000001173789934_li113046492819">Users associated with the <span class="parmname" id="mrs_01_1714__en-us_topic_0000001173789934_parmname141580121757"><b>hetuadmin</b></span> user group can obtain the O&M administrator permissions on the <span id="mrs_01_1714__en-us_topic_0000001173789934_text8429366616">HetuEngine</span> HSConsole web UI and <span id="mrs_01_1714__en-us_topic_0000001173789934_text1950010391368">HetuEngine</span> compute instance web UI.</li><li id="mrs_01_1714__en-us_topic_0000001173789934_li1543119503714">Users associated with the <span class="parmname" id="mrs_01_1714__en-us_topic_0000001173789934_parmname926414581162"><b>hetuuser</b></span> user group can obtain the SQL execution permission.</li></ul>
|
|
<p id="mrs_01_1714__en-us_topic_0000001173789934_p14369759143914">If Ranger authentication is enabled and you need to configure the permissions to manage databases, tables, and columns of data sources for a user after it is created, see <a href="mrs_01_1862.html">Adding a Ranger Access Permission Policy for HetuEngine</a>.</p>
|
|
</div>
|
|
<div class="section" id="mrs_01_1714__en-us_topic_0000001173789934_section915191014281"><h4 class="sectiontitle">Prerequisites</h4><p id="mrs_01_1714__en-us_topic_0000001173789934_p18636121452815">Before using the <span id="mrs_01_1714__en-us_topic_0000001173789934_text22084313817">HetuEngine</span> service, ensure that the tenant to be associated with the <span id="mrs_01_1714__en-us_topic_0000001173789934_text1201343163815">HetuEngine</span> user has been planned and created. For details about how to create and use a tenant in an MRS cluster.</p>
|
|
<div class="note" id="mrs_01_1714__en-us_topic_0000001173789934_note14151610132819"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="mrs_01_1714__en-us_topic_0000001173789934_p115181020282">Common users can only perform operations on and view information about clusters of the tenants associated with them.</p>
|
|
</div></div>
|
|
</div>
|
|
<div class="section" id="mrs_01_1714__en-us_topic_0000001173789934_section187121827182911"><h4 class="sectiontitle">Procedure</h4><p id="mrs_01_1714__en-us_topic_0000001173789934_p33512493174"><strong id="mrs_01_1714__en-us_topic_0000001173789934_b41568151160">Creating a <span id="mrs_01_1714__en-us_topic_0000001173789934_text115211508180">HetuEngine</span> administrator</strong></p>
|
|
<ol id="mrs_01_1714__en-us_topic_0000001173789934_ol147121276291"><li id="mrs_01_1714__en-us_topic_0000001173789934_li187571286105"><span>Log in to FusionInsight Manager.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li3712172711293"><span>Choose <strong id="mrs_01_1714__en-us_topic_0000001173789934_b14182813072">System</strong> > <strong id="mrs_01_1714__en-us_topic_0000001173789934_b51821135718">Permission</strong> > <strong id="mrs_01_1714__en-us_topic_0000001173789934_b141822137711">User</strong> > <strong id="mrs_01_1714__en-us_topic_0000001173789934_b1418312131170">Create</strong>.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li147079151420"><span>Enter a username, for example, <strong id="mrs_01_1714__en-us_topic_0000001173789934_b113656389716">hetu_admin</strong>.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li1717320631917"><span>Set <span class="parmname" id="mrs_01_1714__en-us_topic_0000001173789934_parmname1127118391271"><b>User Type</b></span> to <strong id="mrs_01_1714__en-us_topic_0000001173789934_b5272939873">Human-machine</strong>.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li20527195021911"><span>Set <strong id="mrs_01_1714__en-us_topic_0000001173789934_b149053819812">New Password</strong> and <strong id="mrs_01_1714__en-us_topic_0000001173789934_b10502153815814">Confirm Password</strong>.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li1990053502014"><span>In the <strong id="mrs_01_1714__en-us_topic_0000001173789934_b886514197496">User Group</strong> area, click <strong id="mrs_01_1714__en-us_topic_0000001173789934_b17865819154917">Add</strong> to add the <strong id="mrs_01_1714__en-us_topic_0000001173789934_b14865719104910">hive</strong>, <strong id="mrs_01_1714__en-us_topic_0000001173789934_b2866171920491">hetuadmin</strong>, <strong id="mrs_01_1714__en-us_topic_0000001173789934_b986611196496">hadoop</strong>, <strong id="mrs_01_1714__en-us_topic_0000001173789934_b5866141984910">hetuuser</strong>, and <strong id="mrs_01_1714__en-us_topic_0000001173789934_b13867319104916">yarnviewgroup</strong> user groups for the user.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li12838161662111"><span>In the <strong id="mrs_01_1714__en-us_topic_0000001173789934_b1987618437910">Primary Group</strong> drop-down list, select <strong id="mrs_01_1714__en-us_topic_0000001173789934_b28401372107">hive</strong> as the primary group.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li798187192215"><span>In the <strong id="mrs_01_1714__en-us_topic_0000001173789934_b18940207102">Role</strong> area, click <strong id="mrs_01_1714__en-us_topic_0000001173789934_b44071123141011">Add</strong> to assign the <strong id="mrs_01_1714__en-us_topic_0000001173789934_b1777013520105">default</strong>, <strong id="mrs_01_1714__en-us_topic_0000001173789934_b157222039201017">System_administrator</strong>, and desired tenant role permissions to the user.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li7712142762920"><span>Click <strong id="mrs_01_1714__en-us_topic_0000001173789934_b16265143181118">OK</strong>.</span></li></ol>
|
|
<p id="mrs_01_1714__en-us_topic_0000001173789934_p97162405258"><strong id="mrs_01_1714__en-us_topic_0000001173789934_b10520114714259">Creating a common <span id="mrs_01_1714__en-us_topic_0000001173789934_text952014720257">HetuEngine</span> user</strong></p>
|
|
<ol id="mrs_01_1714__en-us_topic_0000001173789934_ol172262517265"><li id="mrs_01_1714__en-us_topic_0000001173789934_li202261552610"><span>Log in to FusionInsight Manager.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li1922614520268"><span>Choose <strong id="mrs_01_1714__en-us_topic_0000001173789934_b76381457191112">System</strong> > <strong id="mrs_01_1714__en-us_topic_0000001173789934_b1063935715117">Permission</strong> > <strong id="mrs_01_1714__en-us_topic_0000001173789934_b1763905719115">User</strong> > <strong id="mrs_01_1714__en-us_topic_0000001173789934_b664035718110">Create</strong>.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li182265592611"><span>Enter a username, for example, <strong id="mrs_01_1714__en-us_topic_0000001173789934_b6145959141112">hetu_test</strong>.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li1722610572619"><span>Set <span class="parmname" id="mrs_01_1714__en-us_topic_0000001173789934_parmname9700191641216"><b>User Type</b></span> to <strong id="mrs_01_1714__en-us_topic_0000001173789934_b070114169129">Human-machine</strong>.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li92261752267"><span>Set <strong id="mrs_01_1714__en-us_topic_0000001173789934_b111131819201217">New Password</strong> and <strong id="mrs_01_1714__en-us_topic_0000001173789934_b3113719201211">Confirm Password</strong>.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li1322613522619"><span>In the <strong id="mrs_01_1714__en-us_topic_0000001173789934_b1454835914613">User Group</strong> area, click <strong id="mrs_01_1714__en-us_topic_0000001173789934_b165484591466">Add</strong> to add the <strong id="mrs_01_1714__en-us_topic_0000001173789934_b1354919592613">hetuuser</strong> user group for the user.</span><p><div class="note" id="mrs_01_1714__en-us_topic_0000001173789934_note209517481069"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="mrs_01_1714__en-us_topic_0000001173789934_ul1613215852619"><li id="mrs_01_1714__en-us_topic_0000001173789934_li121331811264">Ranger authentication is enabled for the HetuEngine service in the MRS cluster by default. <span id="mrs_01_1714__en-us_topic_0000001173789934_text09519533616">HetuEngine</span> common users only need to be associated with the <strong id="mrs_01_1714__en-us_topic_0000001173789934_b119611295417">hetuuser</strong> user group. If Ranger authentication is disabled, you must associate the user with the <span class="parmname" id="mrs_01_1714__en-us_topic_0000001173789934_parmname1537611261961"><b>hive</b></span> user group and set it as the primary group. Otherwise, the <span id="mrs_01_1714__en-us_topic_0000001173789934_text11201191214118">HetuEngine</span> service may be unavailable.</li><li id="mrs_01_1714__en-us_topic_0000001173789934_li8274109142611">If Ranger authentication is enabled and you need to configure the permissions to manage databases, tables, and columns of data sources for a user after it is created, see <a href="mrs_01_1862.html">Adding a Ranger Access Permission Policy for HetuEngine</a>.</li></ul>
|
|
</div></div>
|
|
</p></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li12261514266"><span>In the <strong id="mrs_01_1714__en-us_topic_0000001173789934_b7502115564918">Role</strong> area, click <strong id="mrs_01_1714__en-us_topic_0000001173789934_b150275524919">Add</strong> to assign the <strong id="mrs_01_1714__en-us_topic_0000001173789934_b45032055184919">default</strong> or desired tenant role permissions to the user.</span></li><li id="mrs_01_1714__en-us_topic_0000001173789934_li3226115142614"><span>Click <strong id="mrs_01_1714__en-us_topic_0000001173789934_b54452654024712">OK</strong>.</span></li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="mrs_01_1721.html">HetuEngine Permission Management</a></div>
|
|
</div>
|
|
</div>
|
|
|