index.html 24 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <!DOCTYPE html
  3. PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  4. <html lang="en-us" xml:lang="en-us">
  5. <head>
  6. <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
  7. <link rel="stylesheet" type="text/css" href="commonltr.css"/>
  8. <title>User Admin</title>
  9. </head>
  10. <body id="topic_11"><a name="topic_11"><!-- --></a>
  11. <h1 class="title topictitle1">User Admin </h1>
  12. <div class="body conbody">
  13. <p class="p">The User Admin application lets a superuser add, delete, and manage Hue
  14. users and groups, and configure group permissions. Superusers can add users and groups
  15. individually, or import them from an LDAP directory. Group permissions define the Hue
  16. applications visible to group members when they log into Hue and the application features
  17. available to them. </p>
  18. </div>
  19. <div class="topic concept nested1" xml:lang="en-US" lang="en-US" id="topic_11_1"><a name="topic_11_1"><!-- --></a>
  20. <h2 class="title topictitle2">Starting User Admin</h2>
  21. <div class="body conbody">
  22. <p class="p">Click the <strong class="ph b">User Admin</strong> icon (<a name="topic_11_1__image_exr_mp5_wj"><!-- --></a><img class="image" id="topic_11_1__image_exr_mp5_wj" src="/static/art/help/icon_useradmin_24.png"/>) in the navigation bar at the top of the Hue browser page. The Hue
  23. Users page opens. </p>
  24. </div>
  25. </div>
  26. <div class="topic concept nested1" xml:lang="en-US" lang="en-US" id="topic_11_2"><a name="topic_11_2"><!-- --></a>
  27. <h2 class="title topictitle2">Users</h2>
  28. <div class="body conbody">
  29. <p class="p">The User Admin application provides two levels of user privileges:
  30. superusers and users. </p>
  31. <ul class="ul">
  32. <li class="li">Superusers — The first user who logs into Hue after its initial
  33. installation becomes the first superuser. Superusers have permissions to perform
  34. administrative functions:<ul class="ul">
  35. <li class="li">Add and delete users</li>
  36. <li class="li">Add and delete groups</li>
  37. <li class="li">Assign permissions to groups</li>
  38. <li class="li">Change a user into a superuser</li>
  39. <li class="li">Import users and groups from an LDAP server</li>
  40. </ul>
  41. </li>
  42. <li class="li">Users — can change their name, e-mail address, and password and log in to Hue
  43. and run Hue applications, subject to the permissions provided by the Hue groups
  44. to which they belong.</li>
  45. </ul>
  46. </div>
  47. <div class="topic concept nested2" xml:lang="en-US" lang="en-US" id="topic_11_2_1"><a name="topic_11_2_1"><!-- --></a>
  48. <h3 class="title topictitle3">Adding a User</h3>
  49. <div class="body conbody">
  50. <ol class="ol">
  51. <li class="li">In the <strong class="ph b">User Admin</strong> page, click <strong class="ph b">Add User</strong>. </li>
  52. <li class="li">In the <strong class="ph b">Credentials</strong> screen, add
  53. required information about the user. Once you provide the required information you can
  54. click the wizard step tabs to set other information.
  55. <div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" class="table" frame="hsides" border="1" rules="all">
  56. <tbody class="tbody">
  57. <tr class="row">
  58. <td class="entry" valign="top" width="25%">
  59. <p class="p"><strong class="ph b">Username</strong>
  60. </p>
  61. </td>
  62. <td class="entry" valign="top" width="75%">
  63. <p class="p">A user name that contains only letters, numbers, and
  64. underscores; blank spaces are not allowed and the name cannot begin with a
  65. number. The user name is used to log into Hue and in file permissions and
  66. job submissions. This is a required field. </p>
  67. </td>
  68. </tr>
  69. <tr class="row">
  70. <td class="entry" valign="top" width="25%">
  71. <p class="p"><strong class="ph b">Password</strong> and <strong class="ph b">Password confirmation</strong>
  72. </p>
  73. </td>
  74. <td class="entry" valign="top" width="75%">
  75. <p class="p">A password for the user. This is a required field. </p>
  76. </td>
  77. </tr>
  78. <tr class="row">
  79. <td class="entry" valign="top" width="25%">
  80. <p class="p"><strong class="ph b">Create home directory</strong>
  81. </p>
  82. </td>
  83. <td class="entry" valign="top" width="75%">
  84. <p class="p" id="topic_11_2_1__p_rll_r1q_2k"><a name="topic_11_2_1__p_rll_r1q_2k"><!-- --></a>Indicate whether <span class="ph" id="topic_11_2_1__homeDir"><a name="topic_11_2_1__homeDir"><!-- --></a>to
  85. create a directory named
  86. <span class="ph filepath">/user/</span><var class="keyword varname">username</var> in HDFS. For
  87. non-superusers, the user and group of the directory are
  88. <var class="keyword varname">username</var>. For superusers, the user and group are
  89. <var class="keyword varname">username</var> and supergroup.</span>
  90. </p>
  91. </td>
  92. </tr>
  93. </tbody>
  94. </table>
  95. </div>
  96. </li>
  97. <li class="li">Click <strong class="ph b">Add User</strong> to save the
  98. information you specified and close the <strong class="ph b">Add User</strong>
  99. wizard or click <strong class="ph b">Next</strong>.</li>
  100. <li class="li">In the <strong class="ph b">Names and Groups</strong> screen, add optional
  101. information.
  102. <div class="tablenoborder"><a name="topic_11_2_1__table_slr_xzp_2k"><!-- --></a><table cellpadding="4" cellspacing="0" summary="" id="topic_11_2_1__table_slr_xzp_2k" class="table" frame="hsides" border="1" rules="all">
  103. <tbody class="tbody">
  104. <tr class="row">
  105. <td class="entry" valign="top" width="25%">
  106. <p class="p"><strong class="ph b">First name</strong> and <strong class="ph b">Last name</strong>
  107. </p>
  108. </td>
  109. <td class="entry" valign="top" width="75%">
  110. <p class="p">The user's first and last name. </p>
  111. </td>
  112. </tr>
  113. <tr class="row">
  114. <td class="entry" valign="top" width="25%">
  115. <p class="p"><strong class="ph b">E-mail address</strong>
  116. </p>
  117. </td>
  118. <td class="entry" valign="top" width="75%">
  119. <p class="p">The user's e-mail address. The e-mail address is used by
  120. the Job Designer and Beeswax applications to send users an e-mail message
  121. after certain actions have occurred. The Job Designer sends an e-mail
  122. message after a job has completed. Beeswax sends a message after a query has
  123. completed. If an e-mail address is not specified, the application will not
  124. attempt to email the user. </p>
  125. </td>
  126. </tr>
  127. <tr class="row">
  128. <td class="entry" valign="top" width="25%">
  129. <p class="p"><strong class="ph b">Groups</strong>
  130. </p>
  131. </td>
  132. <td class="entry" valign="top" width="75%">
  133. <p class="p">The groups to which the user belongs. By default, a user
  134. is assigned to the <strong class="ph b">default</strong> group, which
  135. allows access to all applications. See <a class="xref" href="#topic_11_4">Managing
  136. Application Permissions</a>. </p>
  137. </td>
  138. </tr>
  139. </tbody>
  140. </table>
  141. </div>
  142. </li>
  143. <li class="li">Click <strong class="ph b">Add User</strong> to save the
  144. information you specified and close the <strong class="ph b">Add User</strong>
  145. wizard or click <strong class="ph b">Next</strong>.</li>
  146. <li class="li">In the <strong class="ph b">Advanced</strong> screen, add status information.
  147. <div class="tablenoborder"><a name="topic_11_2_1__table_wqj_d1q_2k"><!-- --></a><table cellpadding="4" cellspacing="0" summary="" id="topic_11_2_1__table_wqj_d1q_2k" class="table" frame="hsides" border="1" rules="all">
  148. <tbody class="tbody">
  149. <tr class="row">
  150. <td class="entry" valign="top" width="25%">
  151. <p class="p"><strong class="ph b">Active</strong>
  152. </p>
  153. </td>
  154. <td class="entry" valign="top" width="75%">
  155. <p class="p">Indicate that the user is enabled and allowed to log in. </p>
  156. <p class="p">Default: checked.</p>
  157. </td>
  158. </tr>
  159. <tr class="row">
  160. <td class="entry" valign="top" width="25%">
  161. <p class="p"><strong class="ph b">Superuser status</strong>
  162. </p>
  163. </td>
  164. <td class="entry" valign="top" width="75%">
  165. <p class="p">Assign superuser privileges to the user. </p>
  166. </td>
  167. </tr>
  168. </tbody>
  169. </table>
  170. </div>
  171. </li>
  172. <li class="li">Click <strong class="ph b">Add User</strong> to save the
  173. information you specified and close the <strong class="ph b">Add User</strong>
  174. wizard.</li>
  175. </ol>
  176. </div>
  177. </div>
  178. <div class="topic concept nested2" xml:lang="en-US" lang="en-US" id="topic_11_2_2"><a name="topic_11_2_2"><!-- --></a>
  179. <h3 class="title topictitle3">Deleting a User</h3>
  180. <div class="body conbody">
  181. <ol class="ol">
  182. <li class="li">Check the checkbox next to the user name and click <strong class="ph b">Delete</strong>.</li>
  183. <li class="li">Click <strong class="ph b">Yes</strong> to confirm.</li>
  184. </ol>
  185. </div>
  186. </div>
  187. <div class="topic concept nested2" xml:lang="en-US" lang="en-US" id="topic_11_2_3"><a name="topic_11_2_3"><!-- --></a>
  188. <h3 class="title topictitle3">Editing a User</h3>
  189. <div class="body conbody">
  190. <ol class="ol">
  191. <li class="li">Click the user you want to edit in the <strong class="ph b">Hue Users</strong> list.</li>
  192. <li class="li">Make the changes to the user and then click <strong class="ph b">Update user</strong>.</li>
  193. </ol>
  194. </div>
  195. </div>
  196. <div class="topic concept nested2" xml:lang="en-US" lang="en-US" id="topic_11_2_4"><a name="topic_11_2_4"><!-- --></a>
  197. <h3 class="title topictitle3">Importing Users from an LDAP Directory</h3>
  198. <div class="body conbody">
  199. <p class="p">Hue must be configured to use an external LDAP directory (OpenLDAP or
  200. Active Directory). <span class="ph">See Hue Installation in <a class="xref" href="http://www.cloudera.com/content/cloudera-content/cloudera-docs/CDH4/latest/CDH4-Installation-Guide/CDH4-Installation-Guide.html" target="_blank">CDH4
  201. Installation</a>. </span></p>
  202. <div class="note note"><span class="notetitle"><img src="/static/art/help/note.jpg"/> 
  203. <b>Note</b>:</span>
  204. <p class="p"> Importing users from an LDAP directory does not import any password information. You must add passwords
  205. manually in order for a user to log in.
  206. </p>
  207. </div>
  208. <p class="p">To add a user from an external LDAP directory:
  209. </p>
  210. <ol class="ol">
  211. <li class="li">Click <strong class="ph b">Add/sync LDAP user</strong>. </li>
  212. <li class="li">Specify the user properties:
  213. <div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" class="table" frame="hsides" border="1" rules="all">
  214. <tbody class="tbody">
  215. <tr class="row">
  216. <td class="entry" valign="top" width="25%">
  217. <p class="p"><strong class="ph b">Username</strong></p>
  218. </td>
  219. <td class="entry" valign="top" width="75%">
  220. <p class="p">The user name.</p>
  221. </td>
  222. </tr>
  223. <tr class="row">
  224. <td class="entry" valign="top" width="25%">
  225. <p class="p"><strong class="ph b">Distinguished name</strong></p>
  226. </td>
  227. <td class="entry" valign="top" width="75%">
  228. <p class="p">Indicate that Hue should use a full distinguished name for the user. This
  229. imports the user's first and last name, username, and email, but does not
  230. store the user password.</p>
  231. </td>
  232. </tr>
  233. <tr class="row">
  234. <td class="entry" valign="top" width="25%">
  235. <p class="p"><strong class="ph b">Create home directory</strong></p>
  236. </td>
  237. <td class="entry" valign="top" width="75%">
  238. <p class="p">Indicate that Hue should create a home directory for the user in HDFS.</p>
  239. </td>
  240. </tr>
  241. </tbody>
  242. </table>
  243. </div>
  244. </li>
  245. <li class="li">Click <strong class="ph b">Add/sync user</strong>.<p class="p">If the
  246. user already exists in the User Admin, the user information in User Admin is synced
  247. with what is currently in the LDAP directory.</p>
  248. </li>
  249. </ol>
  250. </div>
  251. </div>
  252. <div class="topic concept nested2" xml:lang="en-US" lang="en-US" id="topic_11_2_5"><a name="topic_11_2_5"><!-- --></a>
  253. <h3 class="title topictitle3">Syncing Users and Groups with an LDAP Directory</h3>
  254. <div class="body conbody">
  255. <p class="p">You can sync the Hue user database with the current state of the LDAP
  256. directory using the <strong class="ph b">Sync LDAP users/groups</strong> function.
  257. This updates the user and group information for the already imported users and groups. It
  258. does not import any new users or groups. </p>
  259. <ol class="ol">
  260. <li class="li">Click <strong class="ph b">Sync LDAP users/groups</strong>.</li>
  261. <li class="li">The <strong class="ph b">Create Home Directories</strong> checkbox creates home
  262. directories in HDFS for existing imported members that don't have home directories.</li>
  263. <li class="li">In the <strong class="ph b">Sync LDAP users and groups</strong> dialog, click <strong class="ph b">Sync</strong> to
  264. perform the sync.</li>
  265. </ol>
  266. </div>
  267. </div>
  268. </div>
  269. <div class="topic concept nested1" xml:lang="en-US" lang="en-US" id="topic_11_3"><a name="topic_11_3"><!-- --></a>
  270. <h2 class="title topictitle2">Groups</h2>
  271. <div class="body conbody">
  272. <p class="p">Superusers can add and delete groups, configure group permissions, and
  273. assign users to group memberships. </p>
  274. </div>
  275. <div class="topic concept nested2" xml:lang="en-US" lang="en-US" id="topic_11_3_1"><a name="topic_11_3_1"><!-- --></a>
  276. <h3 class="title topictitle3">Adding a Group</h3>
  277. <div class="body conbody">
  278. <p class="p">You can add groups, and delete the groups you've added. You can also import groups from an LDAP directory.
  279. </p>
  280. <ol class="ol">
  281. <li class="li">In the <strong class="ph b">User Admin</strong> window, click
  282. <strong class="ph b">Groups</strong> and then click <strong class="ph b">Add Group</strong>.</li>
  283. <li class="li">Specify the group properties:
  284. <div class="tablenoborder"><a name="topic_11_3_1__table_rxy_gdh_b3"><!-- --></a><table cellpadding="4" cellspacing="0" summary="" id="topic_11_3_1__table_rxy_gdh_b3" class="table" frame="hsides" border="1" rules="all">
  285. <tbody class="tbody">
  286. <tr class="row">
  287. <td class="entry" valign="top" width="25%">
  288. <p class="p"><strong class="ph b">Name</strong></p>
  289. </td>
  290. <td class="entry" valign="top" width="75%">
  291. <p class="p">The name of the group. Group names can only be letters,
  292. numbers, and underscores; blank spaces are not allowed.</p>
  293. </td>
  294. </tr>
  295. <tr class="row">
  296. <td class="entry" valign="top" width="25%">
  297. <p class="p"><strong class="ph b">Members</strong></p>
  298. </td>
  299. <td class="entry" valign="top" width="75%">
  300. <p class="p">The users in the group. Check user names or check <strong class="ph b">Select all</strong>.</p>
  301. </td>
  302. </tr>
  303. <tr class="row">
  304. <td class="entry" valign="top" width="25%">
  305. <p class="p"><strong class="ph b">Permissions</strong></p>
  306. </td>
  307. <td class="entry" valign="top" width="75%">
  308. <p class="p">The applications the users in the group can access.
  309. Check application names or check <strong class="ph b">Select
  310. all</strong>.</p>
  311. </td>
  312. </tr>
  313. </tbody>
  314. </table>
  315. </div>
  316. </li>
  317. <li class="li">Click <strong class="ph b">Add group</strong>.</li>
  318. </ol>
  319. </div>
  320. </div>
  321. <div class="topic concept nested2" xml:lang="en-US" lang="en-US" id="topic_11_3_2"><a name="topic_11_3_2"><!-- --></a>
  322. <h3 class="title topictitle3">Adding Users to a Group</h3>
  323. <div class="body conbody">
  324. <ol class="ol">
  325. <li class="li">In the <strong class="ph b">User Admin</strong> window, click <strong class="ph b">Groups</strong>.</li>
  326. <li class="li">Click the group.</li>
  327. <li class="li">To add users to the group, check the names in the list provided or check
  328. <strong class="ph b">Select All</strong>.</li>
  329. <li class="li">Click <strong class="ph b">Update group</strong>.</li>
  330. </ol>
  331. </div>
  332. </div>
  333. <div class="topic concept nested2" xml:lang="en-US" lang="en-US" id="topic_11_3_3"><a name="topic_11_3_3"><!-- --></a>
  334. <h3 class="title topictitle3">Deleting a Group</h3>
  335. <div class="body conbody">
  336. <ol class="ol">
  337. <li class="li">Click <strong class="ph b">Groups</strong>.</li>
  338. <li class="li">Check the checkbox next to the group and click <strong class="ph b">Delete</strong>.</li>
  339. <li class="li">Click <strong class="ph b">Yes</strong> to confirm.</li>
  340. </ol>
  341. </div>
  342. </div>
  343. <div class="topic concept nested2" xml:lang="en-US" lang="en-US" id="topic_11_3_5"><a name="topic_11_3_5"><!-- --></a>
  344. <h3 class="title topictitle3">Importing Groups from an LDAP Directory</h3>
  345. <div class="body conbody">
  346. <ol class="ol">
  347. <li class="li">From the <strong class="ph b">Groups</strong> tab, click <strong class="ph b">Add/sync LDAP group</strong>.</li>
  348. <li class="li">Specify the group properties:
  349. <div class="tablenoborder"><a name="topic_11_3_5__table_rxy_gdh_b3"><!-- --></a><table cellpadding="4" cellspacing="0" summary="" id="topic_11_3_5__table_rxy_gdh_b3" class="table" frame="hsides" border="1" rules="all">
  350. <tbody class="tbody">
  351. <tr class="row">
  352. <td class="entry" valign="top" width="25%">
  353. <p class="p"><strong class="ph b">Name</strong></p>
  354. </td>
  355. <td class="entry" valign="top" width="75%">
  356. <p class="p">The group name.</p>
  357. </td>
  358. </tr>
  359. <tr class="row">
  360. <td class="entry" valign="top" width="25%">
  361. <p class="p"><strong class="ph b">Distinguished name</strong></p>
  362. </td>
  363. <td class="entry" valign="top" width="75%">
  364. <p class="p">Indicate that Hue should use a full distinguished name for the group.</p>
  365. </td>
  366. </tr>
  367. <tr class="row">
  368. <td class="entry" valign="top" width="25%">
  369. <p class="p"><strong class="ph b">Import new members</strong></p>
  370. </td>
  371. <td class="entry" valign="top" width="75%">
  372. <p class="p">Indicate that Hue should import the members of the group.</p>
  373. </td>
  374. </tr>
  375. <tr class="row">
  376. <td class="entry" valign="top" width="25%">
  377. <p class="p"><strong class="ph b">Import new members from all subgroups
  378. </strong></p>
  379. </td>
  380. <td class="entry" valign="top" width="75%">
  381. <p class="p">Indicate that Hue should import the members of the subgroups.</p>
  382. </td>
  383. </tr>
  384. <tr class="row">
  385. <td class="entry" valign="top" width="25%">
  386. <p class="p"><strong class="ph b">Create home directories</strong></p>
  387. </td>
  388. <td class="entry" valign="top" width="75%">
  389. <p class="p">Indicate that Hue should create home directories in HDFS for the imported
  390. members.</p>
  391. </td>
  392. </tr>
  393. </tbody>
  394. </table>
  395. </div>
  396. </li>
  397. <li class="li">Click <strong class="ph b">Add/sync group</strong>.</li>
  398. </ol>
  399. </div>
  400. </div>
  401. </div>
  402. <div class="topic concept nested1" xml:lang="en-US" lang="en-US" id="topic_11_4"><a name="topic_11_4"><!-- --></a>
  403. <h2 class="title topictitle2">Permissions</h2>
  404. <div class="body conbody">
  405. <p class="p">Permissions for Hue applications are granted to groups, with users
  406. gaining permissions based on their group membership. Group permissions define the Hue
  407. applications visible to group members when they log into Hue and the application features
  408. available to them. </p>
  409. <ol class="ol">
  410. <li class="li">Click <strong class="ph b">Permissions</strong>.</li>
  411. <li class="li">Click the application for which you want to assign permissions.</li>
  412. <li class="li">Check the checkboxes next to the groups you want to have permission
  413. for the application. Check <strong class="ph b">Select all</strong> to select all
  414. groups.</li>
  415. <li class="li">Click <strong class="ph b">Update permission</strong>. The new
  416. groups will appear in the Groups column in the <strong class="ph b">Hue
  417. Permissions</strong> list.</li>
  418. </ol>
  419. </div>
  420. </div>
  421. </body>
  422. </html>