Skip to main content
Skip table of contents

Console rights

About Console rights

The Indexima Dev Console application gives you an overview of your cluster and allows you to manage rights. You can restrict some Console sections from users or roles.

By default, rights on the dev console are disabled meaning that console users have all privileges.

Enable rights on Indexima Console

Add this parameter to your galactica.conf

CODE
# Enable rights on Monitor
webui.authenticate = true
webui.rights = true

Default Access when Console rights are activated

By default, any user who connects to the Indexima Console is able to:

  • Access the Query panel and only see its own queries
  • Access the Catalog panel
  • Access the Notifications panel
  • Access the Node Status panel

Grant/Revoke Rights

Operations

Use GRANT / REVOKE operations to give (or remove) rights to (from) a user or a group of users (role).

Only users with the admin privilege can grant (or revoke) Monitor rights to (from) another user.

SQL
GRANT privilege_name TO {USER|ROLE} target_name;
REVOKE privilege_name FROM {USER|ROLE} target_name; 

Privileges

users.in.admin.roleConsole Rights

Scope of authorisation

Any console user

Allows to see the cluster status in the cluster view and list his own queries in query listing

MONITOR_ADMIN

Give the right to reinitialise the cluster in 'Cluster View'
Give access to the license panel in 'Cluster View'

MONITOR_QUERIES

Allows to see the queries performed by any user in query listing of 'Data view'

MONITOR_ANALYZER

Allows to run and schedule analysis in catalog of 'Data view'

MONITOR_LOG

Give access to the logs and diagnostics in 'Cluster View'

MONITOR_ALL

All combined privileges at once
(MONITOR_ADMIN + MONITOR_QUERIES + MONITOR_ANALYZER + MONITOR_LOG)

Admins defined in users.in.admin.role or having the admin role are NOT subject to the restrictions on the console, they have access to all sections. 

Show Console Rights

CODE
SHOW GRANT ON WAREHOUSE;

Output

Column NameDescription
principal_nameUser Name or role
principal_typeUSER or ROLE
privilegegranted privilege
Admins have unrestricted access to all sections. Thus, their privileges are not listed on this command.
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.