Configuring Kafka ACL Users

Notes and Constraints

• Single-node instances do not support user creation, user password reset, user information modification, or user deletion.
• The initial user set when ciphertext access is enabled for the first time cannot be deleted.
• Resetting a user password will interrupt services. Change the user password in the client configuration file or code as soon as possible.
• The maximum number of users that can be created for a Kafka instance is 20 or 500. Check the console for the actual limit.

Prerequisites

• Ciphertext access has been enabled for the Kafka instance.
• The Kafka instance is in the Running state.

Creating a User

1. Log in to the Kafka console.
2. Click in the upper left corner to select the region where your instance is located.
3. Click the desired instance to go to the instance details page.
4. In the navigation pane, choose Instance > Users.
5. Click Create User in the upper left corner.
6. Set user information by referring to Table 1.

   Table 1 User creation parameters

   Parameter	Description
   Username	The username used to access a Kafka instance, you can customize a name that complies with the rules: 4–64 characters; starts with a letter; can contain only letters, digits, hyphens (-), and underscores (_).
   Password	The password used to access a Kafka instance. A password must meet the following requirements: Contains 8 to 32 characters. Contains at least three types of the following characters: uppercase letters, lowercase letters, digits, and special characters `~!@#$%^&*()-_=+\|[{}];:'",<.>? and spaces, and cannot start with a hyphen (-). Cannot be the username spelled forward or backward.
   Description	The description of a user. 0–200 characters.

7. Click OK.

   View the new user on the user list page.

   After the user is created, grant permissions to the user by referring to Configuring Kafka Topic Permissions.

Resetting a User Password

There are two ways to create a user on the console. Accordingly, there are two ways to reset the user's password:

• Initial user: See section "Resetting the Password (for the Initial User)".
• Non-initial user: See section "Instance" > "Resetting the Password (for Non-initial Users)".

Modifying User Information

1. Log in to the Kafka console.
2. Click in the upper left corner to select the region where your instance is located.
3. Click the desired instance to go to the instance details page.
4. In the navigation pane, choose Instance > Users.
5. In the row containing the desired user, click Edit.
6. Modify the description and click OK.

   After the modification is successful, you can view the new description in the Description column.

Deleting a User

1. Log in to the Kafka console.
2. Click in the upper left corner to select the region where your instance is located.
3. Click the desired instance to go to the instance details page.
4. In the navigation pane, choose Instance > Users.
5. Delete a user in either of the following ways:
   • In the row containing the desired user, click Delete.
   • Select one or more users and click Delete above the list.

6. In the displayed Delete User dialog box, click OK to delete the user.

   The user is deleted if it is not displayed in the user list.

Exporting the User List

1. Log in to the Kafka console.
2. Click in the upper left corner to select the region where your instance is located.
3. Click the desired instance to go to the instance details page.
4. In the navigation pane, choose Instance > Users.
5. Export the user list in either of the following ways:
   • Select the desired users and choose Export > Export selected data to an XLSX file to export specified users.
   • Choose Export > Export all data to an XLSX file to export all users.

   Note: The initial user cannot be selected manually. To export the initial user, choose Export all data to an XLSX file.

Related Documents

• To create a user by calling an API, see Creating a User.
• To reset a user password by calling an API, see Resetting a User Password.
• To grant a user the permission to publish or subscribe to topics, see Configuring Kafka Topic Permissions.