Privacy Settings for a Virtual Cluster

The Privacy Settings option for a Virtual Cluster allows administrators to configure the default behavior of artifact sharing between different users or groups with the VC User role. The Restrict sharing by default option in Privacy Settings allows you to keep all the artifacts private to the user.

By default, the Restrict sharing by default option is automatically selected in the Privacy Settings while creating a Virtual Cluster in the Cloudera Data Engineering UI. Artifacts such as sessions, jobs, job runs, repositories, and resources can only be accessed by the user who created those artifacts. Other users or groups can access the artifacts only if they are explicitly shared with them.

When the Restrict sharing by default option is not enabled, newly created artifacts are shared with full access permission for all users with VC User role in the Virtual Cluster. The artifact access is restricted if the artifact owner has overridden the sharing permissions.

If the Restrict sharing by default option was enabled earlier and is disabled after some time, the artifacts that are created after disabling the Restrict sharing by default option are visible to all the users in the Virtual Cluster. But, the artifacts that are created while the Restrict sharing by default option was active are not displayed for all the users by default. They are only visible to the user who has created them or users or groups with Admin roles such as DEAdmin, Service Admin, or VC Admin.

Example: Jobs A and B are created while the Restrict sharing by default option was active and job C is created after disabling the Restrict sharing by default option. User-01 has a Service Admin role where User-02 has a VC User role and User-02 does not have access to any of the three jobs. So, after disabling the Restrict sharing by default option, User-01 has access to all the three jobs A, B, and C because User-01 has an Admin role but User-02 can access only job C that is created after disabling the Restrict sharing by default option.