User Management

Overview

User Management or Role based access control (RBAC) in Pulse enables administrators to govern user access to Pulse and integrated services. With RBAC, administrators can limit the operations that other users perform. For example, an Apache Spark developer can only be given access to Spark-related integrations in the Hadoop stack.

The following table shows the roles and privileges given to that role.

Access

Admin

User

Create role

Create user

Update role

Update user

Assign page permissions

Delete role

Delete user

Create SSH key

Delete SSH key

Create active directory groups and users

View active directory groups and users

View dashboard metrics

View service status

View alert notifications

Roles Dashboard

The Roles dashboard displays the following tabs.


Roles

A role represents the level of privileges and authorization related to the user.

The following details are displayed in the Roles dashboard.

Column Name

Description

Name

The name of the role

YARN queues

The list of YARN queues the role is a part of

YARN users

The list of YARN users

AD groups

The list of active directory groups


Creating a Role

To create a role, perform the following:


  1. Click the Create Role button. The Create Role wizard is displayed.

  2. Fill the following role assignment details.

    1. Role Details

      1. Name: The name of the role.

    2. Permissions

      1. Page Permissions: The list of services and pages to enable for the role. Click the checkbox next to these services and pages you want to enable. You can also expand the list of services and select specific modules to assign to that role.

      2. All Clusters: Click the drop-down menu and select the clusters for which you would like to add queues and users for. Individual panels are displayed for the clusters selected.

        1. Queues: The list of queues in YARN. Select the queue name from the list and press enter. You can assign multiple queues to a role.

        2. Users: The list of users to assign to a role. Select the user from the list and press enter. You can assign multiple users to a role.

    3. AD Mapping

      1. Groups: The group of users in the active directory. Type the name of a group you want to add and press enter. You can add multiple groups to an active directory.

  3. Click Save.

The new role is created.


Viewing Role details

To view the details of all the roles that you just created, click the Roles icon from the main menu bar. The Roles page is displayed with the following table details:

Column Name

Description

Name

Name of a role you created.

Clusters

Comma separated list of clusters you selected while creating the role.

Yarn Queues

The fundamental unit of Yarn is a queue. Click the view service queues link. A wizard is displayed with the cluster name and its respective queues.

Yarn Users

The user is used to identify the person who submitted a job to a specific queue. Click the view service users link. A wizard is displayed with the cluster name and its respective queues.

AD Groups

List of Acceldata groups that were mapped while creating a role.

AD Users

List of Acceldata users that were mapped while creating a role.

Click the icon beside any column name to display the list of roles in either ascending or descending order respectively.


Modify a Role

To modify a role, perform the following:

  1. Click the role entry displayed in the Roles table.

  2. Edit the fields you want to modify.

  3. Click Save.

The role is modified.

Deleting a Role

To delete a role, perform the following:

  1. Click the three dots icon towards the right of a role entry in the Roles table

  2. Select Delete.

The role is deleted.


Users

A user represents a person interacting with Pulse, with certain privileges.

The following details are displayed in the Users dashboard:

Column Name

Description

Name

The name of the user

Roles

The roles assigned to the user

Creating a User

To create a user, perform the following.

  1. Click the Create Role button. The Create User wizard displays.

  2. Fill the following user details.

    1. User Name: Login name of the user. Enter a unique value.

    2. Password: Password of the user to login with.

    3. Confirm Password: Password of the user. Enter the same value as Password.

    4. Role: The nature of authorization assigned to the user. Select a value from the list. You can add only one to a user. Note You can assign the Admin role to newly created users.

    5. (Optional) LDAP User: User with directory services authentication.

  3. Click Save.

The user is created.

Modifying a User

To modify a user, perform the following.

  1. Click the user entry displayed in the Users table.

  2. Edit the fields you want to modify. This also lets you change the role of a user.

  3. Click Save.

The user details are modified.

Deleting a User

To delete a user, perform the following:

  1. Click the three dots icon towards the right of a user entry in the Users table > Delete.

The user is deleted.


SSH Keys

SSH Key is key-based access method to the available clusters. SSH keys are used to individually manage the authorization and authentication methods.

The following details are displayed in the SSH Keys dashboard.

Column Name

Description

Title

The title of the SSH key

User

The user name to access the SSH key

Created At

The time and date at which the SSH key was created

Creating an SSH Key

To create an SSH key, perform the following.

  1. Click SSH Key button. The Create SSH Keys wizard displays.

  2. Fill the following SSH keys details.

    1. Title: The title of the SSH key.

    2. User name: The user name of the SSH key to log in with.

    3. Key File or Password: The radio button allows you to choose if you want to add a key file or a password enabled file.

    4. Content: The content of the SSH key.

  3. Click Save.

The SSH key has now been generated.


Warning

An SSH key once created cannot be modified.

Deleting an SSH Key

To delete an SSH key, perform the following.

  1. Click the three dots icon towards the right of an SSH key entry in the Users table > Delete.

The SSH key entry is deleted.


Keytabs

A keytab is a file that contains Kerberos principals. Pulse requests the user to provide keytab path for authentication to execute the commands.

The following details are displayed in the Keytabs dashboard.

Column Name

Description

Principle

The title of the Principle

Created At

The time and date at which the Principle was created

Uploading a Keytab

To upload the Keytab click on the +Upload Keytabs button. The following page is displayed at the right side of the screen.

Upload Keytab
  1. Add the Principle name.

  2. To upload a file, use the mouse to drag and drop the file or click on a blank space to upload from your local system.

  3. Click on Save to to upload the Keytab.

The Keytab is now uploaded.

Deleting the Keytab

To delete a Keytab, perform the following.

  1. Click the three dots icon towards the right of an keytab entry in the table.

  2. Select Delete to delete the Keytab.

The Keytab is deleted.


View Environment Details

You can view the details of your environment by clicking the (user) icon at the top right corner. The following table lists the details:

Detail Displayed

Description of the Detail

Version

The version of your Pulse.

Expiry Date

The expiry date of your Pulse license.

Customer Name

Your registered name with Acceldata.

Cluster Name

The current cluster name.

Logged In As

Your role in Pulse.

Refresh Configuration

Allows you to re-establish connection with database. Use this button when you add a new cluster.

Logout

Click here to logout of Pulse.