Creating a User

Scenarios

FusionInsight Manager supports 50000 users (including built-in users) at the maximum. By default, only user admin has the highest operation rights of FusionInsight Manager. You need to create users on FusionInsight Manager and assign operation rights to the user based on site requirements.

Prerequisites

You have learned service requirements and created roles required by service scenarios.

Procedure

1. Log in to FusionInsight Manager.
2. Choose System > Permission > User.
3. On the user list page, click Create.
4. Set Username. Including digits, letters, underlines (_), hyphens(-), or spaces. It is case insensitive. It cannot be the same as the username in the system or OS.
5. Set User Type to either Human-Machine or Machine-Machine.
   • Human-Machine user: used in scenarios such as FusionInsight Manager O&M and component operations on a client. If you select this user type, you need to enter a password and confirm the password in Password and Confirm Password accordingly.
   • Machine-Machine user: used for component development. If you select this user type, you do not need to enter a password, because the password is randomly generated.

6. In the User Group area, click Add to add one or more user groups to the list as required.
   

   • If the selected user group is bound to a role or a permission policy is configured in Ranger, the user obtains the permission of the corresponding role.
   • After FusionInsight Manager is installed, some user groups generated by default have special permissions. Select a correct user group based on the user group description on the GUI.
   • If existing user groups cannot be used, click Create User Group to create a user group. For details, see Adding a User Group.

7. Select a group from all groups added in User Group as the primary group for creating directories and files.

   The drop-down list contains all the groups added to the User Group area.

   

   A user can belong to multiple groups (including the primary and secondary groups, only one primary group, and multiple secondary groups). The primary group of a user is set to facilitate maintenance and comply with the permission mechanism of the hadoop community. In addition, the user's primary group and other groups have the same functions in terms of rights control.

8. In the Role area, click Add to bind a role for each user.
   

   • Adding a role when you create a user can specify the user rights.
   • When you create a user, if permissions of a user group that is granted to the user cannot meet service requirements, you can assign other created roles to the user. If an existing role cannot be used, click Create Role to create a role. For details, see Adding a Role.

     The role and rights assignment takes effect about 3 minutes later. If the rights obtained from the user group meet the requirements, you do not need to add a role.

   • After the Ranger authentication is enabled for a component, users are granted with all permissions except the permissions of the default user group or role.
   • If the user is not added to a user group, or no role is configured for the user, no information is displayed after the user logs in to FusionInsight Manager.

9. Enter information in the Description text box as required.
10. Click OK. The user is created.

    After a Human-Machine user is created, it can be used normally only after the initial password is changed. You can log in to FusionInsight Manager as the user and reset the password as prompted.