Viewing Ranger User Permission Synchronization Information

Updated on 2024-12-13 GMT+08:00

View PDF

You can view Ranger permission settings, such as users, user groups, and roles.

Viewing Ranger Permission Information

Log in to the Ranger web UI as the Ranger administrator rangeradmin. For details, see Logging In to the Ranger Web UI.
Choose Settings > Users/Groups/Roles to view information about users, user groups, or roles in the system.
- Users: displays all user information synchronized from LDAP or OS to Ranger.
- Groups: displays information about all user groups and role information synchronized from LDAP or OS to Ranger.
- Roles: displays information about roles created in Ranger.
NOTE:
- The users, roles, user groups created on FusionInsight Manager are automatically synchronized to Ranger periodically. The default period is 300,000 milliseconds (5 minutes). After roles and user groups in FusionInsight Manager are synchronized to Ranger, they become user groups. Only roles and user groups that are associated with users can be automatically synchronized to Ranger.
- The role created on the Ranger page is a set of users or user groups, which is used to flexibly set the permission access policies of components. The role is different from that on FusionInsight Manager. To prevent any delay in accessing Ranger permission information, it is best to restrict the number of users or user groups assigned to a role to no more than 1,000.
- Users, roles, and user groups cannot be deleted on the Ranger web UI to prevent data inconsistency.

Adjusting Ranger User Types

Log in to the Ranger management page.

To change the Ranger user type, you must log in as an admin user. For details about the user types, see Ranger User Type.
Choose Settings > Users/Groups/Roles. In the list of users, click the name of the user whose type you want to change.
Set Select Role to the type to be modified.
Click Save.

Creating a Ranger Role

Ranger administrators can flexibly configure permission access policies for components based on users, user groups, or roles. User and user group information is automatically synchronized from LDAP, and roles can be manually added.

Log in to the Ranger management page.
Choose Settings > Users/Groups/Roles > Roles > Add New Role.
Enter the role name and description as prompted.
Add users, user groups, and sub-roles to the role.
- In the Users area, select a created user in the system and click Add Users.
- In the Groups area, select a created user group and click Add Group.
- In the Roles area, select a created role in the system and click Add Role.
Click Save. The role is added.

NOTE:

Added roles cannot be deleted but can be modified.

Parent topic: Using Ranger

Previous topic: Configuring Ranger Security Zone

Next topic: Ranger Performance Tuning

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.

Chatbot