Updated on 2024-11-29 GMT+08:00

Creating a LakeSearch Role

This topic describes how to create and configure a LakeSearch role on FusionInsight Manager as the MRS cluster administrator.

Prerequisites

The MRS cluster administrator has been granted required permissions.

Procedure

  1. Log in to FusionInsight Manager.
  2. Choose System > Permission > Role.
  3. Click Create Role. On the displayed page, set the Role Name and Description.
  4. Configure resource permissions.

    Table 1 Permission authorization

    Permission

    How to Grant

    Read a knowledge base

    1. In Configure Resource Permission, choose Name of the desired cluster > LakeSearch > LakeSearch Scope.
    2. In the Permission column of the specified LakeSearch resource, select read.

    Write data into a knowledge base

    1. In Configure Resource Permission, choose Name of the desired cluster > LakeSearch > LakeSearch Scope.
    2. In the Permission column of the specified LakeSearch resource, select write.

    Delete a knowledge base

    1. In Configure Resource Permission, choose Name of the desired cluster > LakeSearch > LakeSearch Scope.
    2. In the Permission column of the specified LakeSearch resource, select delete.

    Operate a knowledge base

    1. In Configure Resource Permission, choose Name of the desired cluster > LakeSearch > LakeSearch Scope.
    2. In the Permission column of the specified LakeSearch resource, select operate.

  5. Click OK.
  6. (Optional) Create a user and grant LakeSearch permissions to the user.

    Create a LakeSearch user, bind the user to the created LakeSearch role, and add it to a user group.

    • If a LakeSearch user is bound to a new role or added to a user group, wait for 3 minutes for information synchronization to the LakeSearch application.
    • Due to the impact of the server caching, if the user to be modified has been logged in, you need to log in again to apply the changes on permission. If the user is bound to a new role or added to a user group, wait for 3 minutes and log in again.