About Monitor rights

The Monitor application gives you an overview of your cluster and allows you to manage it. You can restrict some Monitor sections to users or roles.

By default, rights on Monitor are disabled meaning that users have all privileges.

Enable rights on Monitor

Add this parameter to your galactica.conf

# Enable rights on Monitor
webui.rights = true
CODE


Default Access when Monitor rights are activated

By default, any user who can connect to Monitor would be able to:

  • Access the Query panel and only see its own queries
  • Access the Memory Panel
  • Access the Notifications Panel

Grant/Revoke Rights

Operations

Use GRANT / REVOKE operations to give (or remove) rights to (from) a user or a group of users (role).

Only users with the admin privilege can grant (or revoke) Monitor rights to (from) another user.

GRANT privilege_name TO {USER|ROLE} target_name;
REVOKE privilege_name FROM {USER|ROLE} target_name; 
SQL

Privileges

Monitor RightsDefinition
MONITOR_ADMIN
  • Give access to the admin section,
  • Give the right to reinitialize the cluster
  • Give access to the license Panel
MONITOR_QUERIESAllows to see the queries performed by any user
MONITOR_ANALYZERAllows to run and schedule analysis
MONITOR_LOGGive access to the admin section, without the right to reinitialize the cluster
MONITOR_ALLAll combined privileges at once
Admins are not subject to the restrictions on the monitor, they have access to all sections. 

Show Monitor Rights

SHOW GRANT ON WAREHOUSE;
CODE

Output

Column NameDescription
principal_nameUser Name or role
principal_typeUSER or ROLE
privilegegranted privilege
Admins are not subject to the restrictions on the monitor, they have access to all sections. Thus that privilege is not listed on this command.

Example: Give access to the administration section to a role or user

The user ourAmazingUser has no rights, he currently sees "Memory view" and his own queries.

     

# Gives administration right to user
GRANT MONITOR_ADMIN TO USER 'ourAmazingUser'; 
SQL

From now on, user ourAmazingUser can access the 'Administration' section.