Cloudera Data Flow authorization

As a security administrator with the Cloudera PowerUser role, understand the authorization process to allow Cloudera users to perform tasks.

Table Tasks and roles helps you identify the role or roles a user needs to perform certain common tasks.

Table 1. Tasks and roles

Task to perform	Role or roles required
Manage the lifecycle of a Cloudera Data Flow environment	DFAdmin
Manage flow deployments in a Cloudera Data Flow environment	DFFlowAdmin
Manage all Catalog collections	DFCollectionsAdmin
Manage and delete flow definitions, manage and delete collections	DFCatalogAdmin
Manage flow definitions with the exception of deletion	DFCatalogPublisher
Create a Catalog collection	DFCollectionsCreator or DFCollectionsAdmin
Create a flow deployment	DFCollectionViewer role for the collection where the flow definition is located, or DFCatalogViewer to deploy unassigned flow definitions from the Catalog. DFFlowAdmin
Delete a Catalog Collection	DFCollectionsAdmin
Develop flow definitions	DFFlowDeveloper
Manage Members for a Catalog Collection	DFCollectionAdmin
Import a flow definition into a Catalog collection	DFCatalogPublisher DFCollectionMember or DFCollectionAdmin
Publish a flow draft to Catalog collection	DFFlowDeveloper DFCollectionMember or DFCollectionAdmin
Move a flow definition between Catalog collections	DFCollectionMember or DFCollectionAdmin for both the source and the target collections
Delete a flow definition in an existing Catalog collection	DFCollectionMember or DFCollectionAdmin
Create projects	DFProjectCreator
Manage any project in a workspace	DFProjectsAdmin
Delete any project in a workspace	DFProjectsAdmin
Manage members for a project	DFProjectAdmin
Add resources to a project	DFProjectMember or DFProjectAdmin
Manage resources in a project	DFProjectMember or DFProjectAdmin
Reassign resources between projects	DFProjectMember or DFProjectAdmin for both the source and the target projects