Monitor rights
About Monitor rights
The Monitor application gives you an overview of your cluster and allows you to manage it. You can restrict some Monitor sections to users or roles.
Enable rights on Monitor
Add this parameter to your galactica.conf
# Enable rights on Monitor
webui.rights = true
Default Access when Monitor rights are activated
By default, any user who can connect to Monitor would be able to:
- Access the Query panel and only see its own queries
- Access the Memory Panel
- Access the Notifications Panel
Grant/Revoke Rights
Operations
Use GRANT
/ REVOKE
operations to give (or remove) rights to (from) a user or a group of users (role).
Only users with the admin privilege can grant (or revoke) Monitor rights to (from) another user.
GRANT privilege_name TO {USER|ROLE} target_name;
REVOKE privilege_name FROM {USER|ROLE} target_name;
Privileges
Monitor Rights | Definition |
---|---|
MONITOR_ADMIN |
|
MONITOR_QUERIES | Allows to see the queries performed by any user |
MONITOR_ANALYZER | Allows to run and schedule analysis |
MONITOR_LOG | Give access to the admin section, without the right to reinitialize the cluster |
MONITOR_ALL | All combined privileges at once |
Show Monitor Rights
SHOW GRANT ON WAREHOUSE;
Output
Column Name | Description |
---|---|
principal_name | User Name or role |
principal_type | USER or ROLE |
privilege | granted privilege |
Example: Give access to the administration section to a role or user
The user ourAmazingUser has no rights, he currently sees "Memory view" and his own queries.
# Gives administration right to user
GRANT MONITOR_ADMIN TO USER 'ourAmazingUser';
From now on, user ourAmazingUser can access the 'Administration' section.