Granting CDP users and groups access to Cloudera Data Warehouse service

This topic describes how to grant the DWAdmin and DWUser roles to users and groups who must use or manage Cloudera Data Warehouse (CDW) service Database Catalogs and Virtual Warehouses on public cloud environments.

To grant CDP users access to the CDW service, you grant the DWAdmin or the DWUser resource roles to users on environments. So you are granting permission to the environments that are used to create Database Catalogs and Virtual Warehouses, and not directly to CDW service.

To grant CDP groups access to the CDW service, you create the group in the User Management module of the Management Console. See the Management Console documentation for details. Then you follow the below instructions to grant the group access to an environment. As with granting users access to the CDW service, you grant permission to the group to access the environments that are used to create Database Catalogs and Virtual Warehouses, not directly to CDW service.
  1. Log in to the CDP web UI using your corporate credentials or other credentials that your administrator gave to you.
  2. For an environment you want to use for Database Catalogs and Virtual Warehouses, grant the DWAdmin and DWUser resource roles to users or grant the DWAdmin resource role to groups that must use the Database Catalogs and Virtual Warehouses:
    1. In the left navigation menu, click Environments.
    2. Search for the environment you want to grant access to, and then click the environment name. This launches the environment's Clusters page.
    3. In the environment's Clusters page, click the Actions drop-down menu on the right, and select Manage Access. This launches the environment's Access page.
    4. In the Access page, in the Select group or user text box, type the name of the user or group you want to add, and then click that user or group's name. This launches the Update Resource Roles for… dialog box.
    5. In the dialog box, select the DWAdmin or DWUser or both roles, and then click Update Roles. You should receive a success message.
    6. Click the environment name at the top of the page to navigate back to the Clusters page.
    7. In the Clusters page, click the Actions drop-down menu on the right, and select Synchronize Users to FreeIPA. Depending on how many users have access to the environment, this synchronization process can take a few seconds or a few minutes.
The users and groups you have granted the DWAdmin or DWUser resource roles to can now use CDW service with the environment.