Help Center/ MapReduce Service/ Component Operation Guide (LTS)/ Using Flink/ Using the Flink Web UI/ FlinkServer Permissions Management/ Authentication Based on Users and Roles
Updated on 2022-11-18 GMT+08:00
View PDF

Authentication Based on Users and Roles

This section describes how to create and configure a FlinkServer role on Manager as the MRS cluster administrator. A FlinkServer role can be configured with FlinkServer administrator permission and the permissions to edit and view applications.

You need to set permissions for the specified user in FlinkServer so that they can update, query, and delete data.

Prerequisites

MRS cluster administrator has planned permissions based on business needs.

Procedure

  1. Log in to Manager.
  2. Choose System > Permission > Role.
  3. On the displayed page, click Create Role and specify Role Name and Description.
  4. Set Configure Resource Permission.

    FlinkServer permissions are as follows:

    • FlinkServer Admin Privilege: highest-level permission. Users with the permission can perform service operations on all FlinkServer applications.
    • FlinkServer Application: Users can set application view and applications management permissions on applications.
    Table 1 Setting a role

    Scenario

    Role Authorization

    Setting the administrator operation permission

    In the Configure Resource Permission table, choose Name of the desired cluster > Flink and select FlinkServer Admin Privilege.

    Setting a specified permission on applications
    1. In the Configure Resource Permission table, choose Name of the desired cluster > Flink > FlinkServer Application.
    2. In the Permission column, select application view or applications management.

  5. Click OK. Return to role management page.

    After the FlinkServer is created, create a FlinkServer user and bind the user to the role and user group.