Skip to main content
Skip table of contents

Monitor rights

About Monitor rights

The Monitor application gives you an overview of your cluster and allows you to manage it. You can restrict some Monitor sections to users or roles.

By default, rights on Monitor are disabled meaning that users have all privileges.

Enable rights on Monitor

Add this parameter to your galactica.conf

CODE
# Enable rights on Monitor
webui.rights = true


Default Access when Monitor rights are activated

By default, any user who can connect to Monitor would be able to:

  • Access the Query panel and only see its own queries
  • Access the Memory Panel
  • Access the Notifications Panel

Grant/Revoke Rights

Operations

Use GRANT / REVOKE operations to give (or remove) rights to (from) a user or a group of users (role).

Only users with the admin privilege can grant (or revoke) Monitor rights to (from) another user.

SQL
GRANT privilege_name TO {USER|ROLE} target_name;
REVOKE privilege_name FROM {USER|ROLE} target_name; 

Privileges

Monitor RightsDefinition
MONITOR_ADMIN
  • Give access to the admin section,
  • Give the right to reinitialize the cluster
  • Give access to the license Panel
MONITOR_QUERIESAllows to see the queries performed by any user
MONITOR_ANALYZERAllows to run and schedule analysis
MONITOR_LOGGive access to the admin section, without the right to reinitialize the cluster
MONITOR_ALLAll combined privileges at once
Admins are not subject to the restrictions on the monitor, they have access to all sections. 

Show Monitor Rights

CODE
SHOW GRANT ON WAREHOUSE;

Output

Column NameDescription
principal_nameUser Name or role
principal_typeUSER or ROLE
privilegegranted privilege
Admins are not subject to the restrictions on the monitor, they have access to all sections. Thus that privilege is not listed on this command.

Example: Give access to the administration section to a role or user

The user ourAmazingUser has no rights, he currently sees "Memory view" and his own queries.

     

SQL
# Gives administration right to user
GRANT MONITOR_ADMIN TO USER 'ourAmazingUser'; 

From now on, user ourAmazingUser can access the 'Administration' section.

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.