Console rights

About Console rights

The Indexima Dev Console application gives you an overview of your cluster and allows you to manage rights. You can restrict some Console sections from users or roles.

INFO

By default, rights on the dev console are disabled meaning that console users have all privileges.

Enable rights on Indexima Console

Add this parameter to your galactica.conf

webui.rights = true

Default Access when Console rights are activated

By default, any user who connects to the Indexima Console is able to:

• Access the Query panel and only see its own queries
• Access the Catalog panel
• Access the Notifications panel
• Access the Node Status panel

Grant/Revoke Rights

Operations

Use GRANT / REVOKE operations to give (or remove) rights to (from) a user or a group of users (role).

Only users with the admin privilege can grant (or revoke) Monitor rights to (from) another user.

GRANT privilege_name TO {USER|ROLE} target_name;
REVOKE privilege_name FROM {USER|ROLE} target_name;

Privileges

Console Rights	Scope of authorisation
Any console user	Allows to see the cluster status in the cluster view and list his own queries in query listing
MONITOR_ADMIN	Give the right to reinitialise the cluster in 'Cluster View' Give access to the license panel in 'Cluster View'
MONITOR_QUERIES	Allows to see the queries performed by any user in query listing of 'Data view'
MONITOR_ANALYZER	Allows to run and schedule analysis in catalog of 'Data view'
MONITOR_LOG	Give access to the logs and diagnostics in 'Cluster View'
MONITOR_ALL	All combined privileges at once (MONITOR_ADMIN + MONITOR_QUERIES + MONITOR_ANALYZER + MONITOR_LOG)

INFO

Admins defined in users.in.admin.role or having the admin role are NOT subject to the restrictions on the console, they have access to all sections.

Show Console Rights

SHOW GRANT ON WAREHOUSE;

Output

Column Name	Description
principal_name	User Name or role
principal_type	USER or ROLE
privilege	granted privilege

INFO

Admins have unrestricted access to all sections. Thus, their privileges are not listed on this command.