Creating a KMS Role

Scenario

Create and configure a KMS role on FusionInsight Manager as an MRS cluster administrator. The KMS role can configure key management permissions and key operation permissions.

Procedure

1. Log in to FusionInsight Manager, and choose System > Permission > Role.
2. On the displayed page, click Create Role and specify Role Name and Description.
3. In the Configure Resource Permission area, set permissions as described in Table 1.
   • Key Management Permission: permission to perform all key management operations, including createKey, deleteKey, and rolloverNewVersion
   • Specify key permissions:
     • management: permission to manage this key, including createKey, deleteKey, and rolloverNewVersion
     • view: permission to perform all read operations on this key. However, the createKey, deleteKey, and rolloverNewVersion operations cannot be performed.

   Table 1 Setting roles

   Scenario	Role Authorization
   Setting the key management permission	In the Configure Resource Permission area, choose Name of the desired cluster > KMS, and select Key Management Permission.
   Setting operation permissions of a specified key	In the Configure Resource Permission area, choose Name of the desired cluster > KMS > Keys. In the resource list, click a required resource name. In the Permission column, select required permissions.

   

   Users in the default kmsadmin group have the read permission to read all keys in KMS.

4. Click OK. Return to the Role page.