Roles and System Permissions
System level functions are marked by predefined roles. The respective users who want to carry out the specific functions need to be allotted the specific roles.
| Role | Requires | Operations covered |
|---|---|---|
| view-users | list-users | |
| manage-users | view-users | -add-user -drop-user -change-user-password (only to change other users passwords) |
| view-cluster | view-cluster | |
| manage-cluster | view-cluster | -add-node -drop-node -change-cluster-configuration -shutdown |
| manage-license | -apply-license -revoke-license -view-license |
Exception Conditions
change-user-password: No role or permission is required to change self password. The connected user can change his own password using this command without the need to have any permissions for the same.