Cloudera Docs

Setting connection privileges

Connection privileges are separate components of the CDP Data Visualization RBAC system. Depending on the parameters of the business case, they may be specified identically (and at the same time) for a number of connections, or set separately for each connection.

Follow these steps to add connection-level privileges to the role Test Role 1:

  1. Add another privilege, by clicking the Add Privilege button.
  2. The Add Privilege modal window appears.
  3. Notice that the default privilege type is at the Connection level, but can be changed by selecting either Role or Dataset from the list of Component Types.

    Here, we are defining the Connection level access.

  4. From Connection(s), select either All connections or one of the individual connections.

    We selected access to the samples connection only.

  5. [Optional] Repeat the previous step to add more connections to this privilege.
  6. [Optional] To remove access to a specific connection from the role, click the X icon next to the name of the connection.
  7. Click Create.

    The connection privilege for the samples connection appears on the list of privileges for the role.

    By default, all possible privileges for a connection component are selected:

    • manage analytical views
    • import data
    • create datasets, explore tables

    Note the following:

    1. The privilege type appears with the Connection icon.

    2. Manage analytical views and Import data are independent of one another, and they include the create datasets, explore tables permission. If you uncheck both of these 'greater' permissions, create datasets, explore tables becomes mutable, and can be unselected. But then you will no longer have any connection-level access components.

    3. This privilege may be deleted by clicking the Delete icon.
  8. Click Save at the top of the interface to save the latest changes to the role definition.

Proceed to Setting dataset privileges.