Console rights

About Console rights

The Indexima Dev Console application gives you an overview of your cluster and allows you to manage rights. You can restrict some Console sections from users or roles.

By default, rights on the dev console are disabled meaning that console users have all privileges.

Enable rights on Indexima Console

Add this parameter to your galactica.conf

CODE

webui.rights = true

Default Access when Console rights are activated

By default, any user who connects to the Indexima Console is able to:

Access the Query panel and only see its own queries
Access the Catalog panel
Access the Notifications panel
Access the Node Status panel

Grant/Revoke Rights

Operations

Use GRANT / REVOKE operations to give (or remove) rights to (from) a user or a group of users (role).

Only users with the admin privilege can grant (or revoke) Monitor rights to (from) another user.

SQL

GRANT privilege_name TO {USER|ROLE} target_name;
REVOKE privilege_name FROM {USER|ROLE} target_name;

Privileges

Console Rights	Scope of authorisation
Any console user	Allows to see the cluster status in the cluster view and list his own queries in query listing
MONITOR_ADMIN	Give the right to reinitialise the cluster in 'Cluster View' Give access to the license panel in 'Cluster View'
MONITOR_QUERIES	Allows to see the queries performed by any user in query listing of 'Data view'
MONITOR_ANALYZER	Allows to run and schedule analysis in catalog of 'Data view'
MONITOR_LOG	Give access to the logs and diagnostics in 'Cluster View'
MONITOR_ALL	All combined privileges at once (MONITOR_ADMIN + MONITOR_QUERIES + MONITOR_ANALYZER + MONITOR_LOG)

Admins defined in users.in.admin.role or having the admin role are NOT subject to the restrictions on the console, they have access to all sections.

Show Console Rights

CODE

SHOW GRANT ON WAREHOUSE;

Output

Column Name	Description
principal_name	User Name or role
principal_type	USER or ROLE
privilege	granted privilege

Admins have unrestricted access to all sections. Thus, their privileges are not listed on this command.