Cloudera Docs

Giving access to DataFlow users

Cloudera DataFlow (CDF) restricts who can import flow definitions and deploy them. A "PowerUser" must grant "DFAdmin", "DFFlowAdmin", and "DFCatalogAdmin" roles to users so that they can enable CDF for an environment, import, add, and deploy flow definitions in CDF.

  • The DFAdmin role is required to enable CDF for an environment.
  • The DFFlowAdmin role is required deploy flow definitions in CDF.
  • The DFCatalogAdmin role is required to import flow definitions to the CDF Catalog.

Cloudera recommends that you create a dedicated machine user as a CDP Workload User for CDF. Make sure to set the Workload Password. You need the workload username and password for deploying NiFi flows.

You must also assign the EnvironmentUser role to this machine user within your environment.

  1. Log in to the CDP web interface.
  2. To give a user the permission to enable CDF for an environment:
    1. Go to Management Console > Environments.
      The Environment List page is displayed.
    2. Select the environment in which you want a user to enable CDF.
    3. Go to Actions > Manage Access to display the Environment Access page.
    4. Find the user to whom you want to grant the DFAdmin role, and click Update Roles.
    5. Select DFAdmin and click Update Roles.
  3. To give a user or group the permission to deploy flow definitions.
    1. Go to Management Console > Environments.
      The Environment List page is displayed.
    2. Select the environment to which you want a user or group to deploy flow definitions.
    3. Go to Actions > Manage Access.
      The Environment Access page is displayed.
    4. Find the user or group and click Update Roles.
    5. Select DFFlowAdmin and click Update Roles.
  4. To give a user the permission to import flow definitions:
    1. Go to Management Console > User Management.
    2. Enter the name of the user or group you wish to authorize in the Search field.
    3. Select the user or group from the list that displays.
    4. Click Roles, then Update Roles.
    5. From Update Roles, select DFCatalogAdmin and click Update.
  5. Go to the Environments page.
  6. Click Actions > Synchronize Users to FreeIPA.
    Depending on how many users have access to the environment, this synchronization process can take a few seconds to a few minutes.