| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342 |
- <h1><a name="UserAdmin-IntroducingUserAdmin"></a>Introducing User Admin</h1>
- <p>The User Admin application lets an administrator add, delete, and manage Hue user accounts and groups, and configure group permissions. The permissions allow users, based on their group membership, to launch Hue applications and use application features. You can add users and groups individually, or import them from an LDAP directory.</p>
- <h2><a name="UserAdmin-Contents"></a>Contents</h2>
- <style type='text/css'>/*<![CDATA[*/
- div.rbtoc1348177692294 {margin-left: 1.5em;padding: 0px;}
- div.rbtoc1348177692294 ul {margin-left: 0px;padding-left: 20px;}
- div.rbtoc1348177692294 li {margin-left: 0px;padding-left: 0px;}
- /*]]>*/</style><div class='rbtoc1348177692294'>
- <ul>
- <li><a href='#UserAdmin-IntroducingUserAdmin'>Introducing User Admin</a></li>
- <li><a href='#UserAdmin-StartingUserAdmin'>Starting User Admin</a></li>
- <li><a href='#UserAdmin-WorkingwithUserAccounts'>Working with User Accounts</a></li>
- <ul>
- <li><a href='#UserAdmin-AddingaUserAccount'>Adding a User Account</a></li>
- <li><a href='#UserAdmin-DeletingaUserAccount'>Deleting a User Account</a></li>
- <li><a href='#UserAdmin-EditingaUserAccount'>Editing a User Account</a></li>
- <li><a href='#UserAdmin-ImportingUsersfromanLDAPDirectory'>Importing Users from an LDAP Directory</a></li>
- <li><a href='#UserAdmin-SyncingUsersandGroupswithanLDAPdirectory'>Syncing Users and Groups with an LDAP directory</a></li>
- </ul>
- <li><a href='#UserAdmin-WorkingwithGroups'>Working with Groups</a></li>
- <ul>
- <li><a href='#UserAdmin-AddingaGroup'>Adding a Group</a></li>
- <li><a href='#UserAdmin-AddingUserstoaGroup'>Adding Users to a Group</a></li>
- <li><a href='#UserAdmin-DeletingaGroup'>Deleting a Group</a></li>
- <li><a href='#UserAdmin-EditingaGroup'>Editing a Group</a></li>
- <li><a href='#UserAdmin-ImportingGroupsfromanLDAPDirectory'>Importing Groups from an LDAP Directory</a></li>
- </ul>
- <li><a href='#UserAdmin-ManagingApplicationPermissions'>Managing Application Permissions</a></li>
- </ul></div>
- <p><br class="atl-forced-newline" /></p>
- <h1><a name="UserAdmin-StartingUserAdmin"></a>Starting User Admin</h1>
- <p><b>To start User Admin:</b></p>
- <ul>
- <li>Click the <b>User Admin</b> icon ( <span class="image-wrap" style=""><img src="/useradmin/static/art/useradmin-logo.png" width="30" style="border: 0px solid black"/></span> ) in the navigation bar at the top of the Hue browser page.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- </ul>
- <h1><a name="UserAdmin-WorkingwithUserAccounts"></a>Working with User Accounts</h1>
- <p>The Hue User Admin application provides two levels of user privileges:</p>
- <ul>
- <li>Superusers — have permissions to perform administrative functions – add and delete users, add and delete groups, assign permissions to groups. The first user who logs into Hue after its initial installation becomes the first superuser. That superuser can then create more superusers and user accounts. Later, the superuser can also change any existing user account into a superuser. A superuser can also import users and groups from an LDAP server.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>Users — can log in to Hue and run Hue applications, subject to the permissions provided by the Hue groups to which they belong.</li>
- </ul>
- <div class='panelMacro'><table class='noteMacro'><colgroup><col width='24'><col></colgroup><tr><td valign='top'><img src="/static/art/help/warning.gif" width="16" height="16" align="absmiddle" alt="" border="0"></td><td><b>Note:</b> To do the management tasks described in this chapter, you must log into Hue using a superuser account. Users who don't have superuser permissions can only change their name, e-mail address, and password.</td></tr></table></div>
- <h2><a name="UserAdmin-AddingaUserAccount"></a>Adding a User Account</h2>
- <p><b>To add a user account:</b>
- <br class="atl-forced-newline" /></p>
- <ol>
- <li>In the <b>User Admin</b> page, click <b>Add User</b>.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>In the <b>Add User</b> dialog box, add information about the user.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" />
- The following table describes the options in the <b>Add User</b> dialog box.
- <style type="text/css">
- td.confluenceTd {
- border: #dddddd solid 1px;
- height: 36px;
- padding: 5px 10px;
- vertical-align: top;
- }
- th.confluenceTh {
- border: #dddddd solid 1px;
- height: 40px;
- padding: 5px 10px;
- vertical-align: center;
- }
- </style>
- <div class='table-wrap'>
- <table class='confluenceTable'><tbody>
- <tr>
- <th class='confluenceTh'> <b>User Account Option</b> </th>
- <th class='confluenceTh'> <b>Description</b> </th>
- </tr>
- <tr>
- <td class='confluenceTd'> <b>Username</b> </td>
- <td class='confluenceTd'> Specify a user name that contains only letters, numbers, and underscores; blank spaces are not allowed and the name cannot begin with a number. The user name is used to log into Hue and in file permissions and job submissions. This is a required field. </td>
- </tr>
- <tr>
- <td class='confluenceTd'> <b>First name</b> and <br class="atl-forced-newline" />
- <b>Last name</b> </td>
- <td class='confluenceTd'> Specify the user's first and last name. </td>
- </tr>
- <tr>
- <td class='confluenceTd'> <b>E-mail address</b> </td>
- <td class='confluenceTd'> Specify the user's e-mail address. The e-mail address is used by the Job Designer and Beeswax applications to send users an e-mail message after certain actions have occurred. The Job Designer sends an e-mail message after a user's job has completed. Beeswax sends a message after a query has completed. If an e-mail address is not specified, the application will not attempt to email the user. </td>
- </tr>
- <tr>
- <td class='confluenceTd'> <b>Active</b> </td>
- <td class='confluenceTd'> Select this option to enable this user account and allow the user to log in. Deselect this option to disable an account without deleting it. </td>
- </tr>
- <tr>
- <td class='confluenceTd'> <b>Superuser status</b> </td>
- <td class='confluenceTd'> Select this option to assign superuser privileges to the user. </td>
- </tr>
- <tr>
- <td class='confluenceTd'> <b>Password</b> </td>
- <td class='confluenceTd'> Specify a password for the user. This is a required field. </td>
- </tr>
- </tbody></table>
- </div>
- <p><br class="atl-forced-newline" /></p></li>
- <li>Click <b>Save</b> to save the information you specified and close the <b>Add User</b> dialog box.
- <br class="atl-forced-newline" /></li>
- </ol>
- <h2><a name="UserAdmin-DeletingaUserAccount"></a>Deleting a User Account</h2>
- <p><b>To delete a user account:</b>
- <br class="atl-forced-newline" /></p>
- <ol>
- <li>Select <b>Delete</b> in the row with the user name.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>Click <b>Ok</b> to confirm.
- <br class="atl-forced-newline" /></li>
- </ol>
- <h2><a name="UserAdmin-EditingaUserAccount"></a>Editing a User Account</h2>
- <p><b>To edit a user account:</b>
- <br class="atl-forced-newline" /></p>
- <ol>
- <li>Double-click the user account you want to edit in the <b>Hue Users</b> list, or Select <b>Edit</b> in the row with the user name.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>Make the changes to the user account and then click <b>Save</b>.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- </ol>
- <h2><a name="UserAdmin-ImportingUsersfromanLDAPDirectory"></a>Importing Users from an LDAP Directory</h2>
- <p>Hue must be configured to use an external LDAP directory (OpenLDAP or Active Directory). See <a href="https://ccp.cloudera.com/display/CDH4DOC/Hue+Installation">Hue Installation</a>.</p>
- <div class='panelMacro'><table class='noteMacro'><colgroup><col width='24'><col></colgroup><tr><td valign='top'><img src="/static/art/help/warning.gif" width="16" height="16" align="absmiddle" alt="" border="0"></td><td><b>Note</b><br />Importing users from an LDAP directory does not import any password information. You must add passwords manually in order for a user to log in.</td></tr></table></div>
- <p>To add a user from an external LDAP directory:</p>
- <ol>
- <li>Click <b>Add/sync LDAP user</b>.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>In the <b>Add or Sync a LDAP user</b> dialog, type the user name in the <b>Username</b> field.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" />
- <ul>
- <li>Check the <b>Distinguished Name</b> checkbox to use a full distinguished name for the user.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" />
- This imports the user's first and last name, username, and email, but does not store the user password.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>If the user already exists in the User Admin, this will sync the user information in User Admin with what is currently in the LDAP directory.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- </ul>
- </li>
- </ol>
- <h2><a name="UserAdmin-SyncingUsersandGroupswithanLDAPdirectory"></a>Syncing Users and Groups with an LDAP directory</h2>
- <p>You can sync the Hue user database with the current state of the LDAP directory using the <b>Sync LDAP users/groups</b> function. This will update the user/group information for the already imported users and groups. It does not import any new users or groups.</p>
- <ol>
- <li>Click <b>Sync LDAP users/groups</b>.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>In the <b>Sync LDAP users and groups</b> dialog, click <b>Sync</b> to perform the sync.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- </ol>
- <h1><a name="UserAdmin-WorkingwithGroups"></a>Working with Groups</h1>
- <p>Superusers can add groups, delete the groups they have created, configure group permissions, and assign users to group memberships.</p>
- <h2><a name="UserAdmin-AddingaGroup"></a>Adding a Group</h2>
- <p>You can add groups, and delete the groups you've added. You can also import groups from an LDAP directory.</p>
- <p><b>To add a group:</b>
- <br class="atl-forced-newline" /></p>
- <ol>
- <li>In the <b>User Admin</b> window, click <b>Groups</b> and then click <b>Add Group</b>.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>In the <b>Add Group</b> dialog box, specify a name for the group. Group names can only be letters, numbers, and underscores; blank spaces are not allowed.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>To add users to the group, check the names in the list provided or check <b>Select All</b>.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>Click <b>Save</b> to save the information you specified and close the <b>Add Group</b> dialog box.</li>
- </ol>
- <h2><a name="UserAdmin-AddingUserstoaGroup"></a>Adding Users to a Group</h2>
- <ol>
- <li>In the <b>User Admin</b> window, click <b>Groups</b>.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>In the <b>Groups</b> list, click the <b>Edit</b> button.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>To add users to the group, check the names in the list provided or check <b>Select All</b>.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- </ol>
- <h2><a name="UserAdmin-DeletingaGroup"></a>Deleting a Group</h2>
- <p><b>To delete a group:</b>
- <br class="atl-forced-newline" /></p>
- <ol>
- <li>Click <b>Groups</b> to view the <b>Groups</b> list.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>Click the <b>Delete</b> button to the right of the group you want to delete.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>Click <b>Yes</b> to confirm.
- <br class="atl-forced-newline" /></li>
- </ol>
- <h2><a name="UserAdmin-EditingaGroup"></a>Editing a Group</h2>
- <p>You can add and remove users, and create subgroups for groups created manually in Authorization Manager.</p>
- <p><b>To edit a group:</b>
- <br class="atl-forced-newline" /></p>
- <ol>
- <li>Click <b>Groups</b> to view the <b>Groups</b> list.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>Click the <b>Edit</b> button to the right of the group you want to modify.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>Make the changes for the group and then click <b>Save</b>.
- <br class="atl-forced-newline" /></li>
- </ol>
- <h2><a name="UserAdmin-ImportingGroupsfromanLDAPDirectory"></a>Importing Groups from an LDAP Directory</h2>
- <p>To add a group from an external LDAP directory:</p>
- <ol>
- <li>From the <b>Groups</b> tab, Click <b>Add/sync LDAP user</b>.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>In the <b>Add or Sync a LDAP group</b> dialog, type the group name in the <b>Name</b> field.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" />
- <ul>
- <li>Check the <b>Distinguished Name</b> checkbox to use a full distinguished name. <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>Check <b>Import new members</b> to also import the members of the group. or the group.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- </ul>
- </li>
- </ol>
- <h1><a name="UserAdmin-ManagingApplicationPermissions"></a>Managing Application Permissions</h1>
- <p>Permissions for Hue applications are granted to groups, with users gaining permissions based on their group membership. Superusers can assign or remove permissions from groups, including groups imported from LDAP.</p>
- <p><a name="UserAdmin-AssigningPermissions"></a></p>
- <p>Group permissions define the applications within Hue that group members are allowed to launch, and the features they can use.</p>
- <p><b>To assign or change Hue application permissions:</b></p>
- <ol>
- <li>Click <b>Permissions</b>.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>Click the <b>Edit</b> button next to the application for which you want to assign permissions.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>Select the Groups you want to have permission for the application. You can check <b>Select All</b> to select all groups.
- <br class="atl-forced-newline" />
- <br class="atl-forced-newline" /></li>
- <li>Click <b>Save</b>.<br/>
- The new groups will appear in the Groups column in the <b>Hue Permissions</b> list.</li>
- </ol>
- <br/>
- </td>
- </tr>
- </table>
-
- </body>
- </html>
|