User Management

User roles control the actions a user can perform. There are currently two user roles:
  • Admin - For administrative access. Has full access to Cloudera Director functionality, and can perform the following actions:
    • Add environments, Cloudera Manager instances, and clusters
    • Delete environments
    • Terminate Cloudera Manager and cluster instances
    • Review environments, Cloudera Manager instances, and clusters
    • Grow and shrink clusters
    • Add and delete users
    • Change user roles
    • Change passwords, including own password
  • Guest - For read-only access.
On installation, the Cloudera Director server component includes one of each of the two kinds of user accounts:
  • admin - Default password: admin
  • guest - Default password: guest

Cloudera recommends that you change the passwords for these accounts after installing the server. User accounts can be created, deleted, enabled, or disabled. A disabled user account cannot log in or perform any Cloudera Director actions.

User account data is kept in the Cloudera Director database. You can define new user accounts for Cloudera Director with either the server UI or the API.

Managing Users with the Cloudera Director Web UI

You can perform the following user management operations through the Cloudera Director Web UI:

Create a User Account

To create a new user account, perform the following steps:
  1. On the Cloudera Director home screen, click the dropdown menu in the upper right and click Manage Users.
  2. Click the Add User button.
  3. Enter a username and password for the new user, and select a role (Admin or Guest).
  4. Click Add User.

Disable a User Account

To disable an existing user account, perform the following steps:
  1. On the Cloudera Director home screen, click the dropdown menu in the upper right and click Manage Users.
  2. Click the checkbox next to the user account you want to disable.
  3. Click the dropdown menu for the user account in the Actions column and click Disable User.
  4. Confirm that user you have disabled now appears grayed out on the Manage Users screen.
You can use the same procedure to enable a user account that is currently disabled. The Actions dropdown list displays the item Enable User for a user account that is currently disabled.

Change User Account Passwords

Users with the admin role can change any user's password. Guest users can change only their own password.

To change your own password, perform the following steps:
  1. On the Cloudera Director home screen, click the dropdown menu in the upper right and click Change password.
  2. Enter your current password, a new password, and the new password again to confirm.
  3. Click Save changes.
To change another user's password, perform the following steps (using the required Admin role):
  1. On the Cloudera Director home screen, click the dropdown menu in the upper right and click Manage Users.
  2. Click the checkbox next to the user whose password you want to change.
  3. Click the dropdown menu for the user account in the Actions column and click Change password.
  4. Enter a new password and enter the password again to confirm.
  5. Click Save changes.

Change a User's Role

An Admin user can change another user's role by performing the following steps:
  1. On the Cloudera Director home screen, click the dropdown menu in the upper right and click Manage Users.
  2. Click the checkbox next to the user whose role you want to change.
  3. Click the dropdown menu for the user in the Actions column and click Change role.
  4. Select the new role in the Role dropdown menu.
  5. Click Save changes.

Delete a User Account

An Admin user can delete a user account by performing the following steps:
  1. On the Cloudera Director home screen, click the dropdown menu in the upper right and click Manage Users.
  2. Click the checkbox next to the user account you want to delete.
  3. Click the dropdown menu for the user account in the Actions column and click Delete.
  4. Click Delete to confirm.

Managing Users with the Cloudera Director API

Cloudera Director server has a REST service endpoint for user management, at director-server-hostname:7189/api/v2/users. You can perform the following user-management operations with the Cloudera Director API. They all use JSON for input data and response data.
REST method Description
GET /api/v2/users Lists all usernames.
POST /api/v2/users Creates a new user account (Admin role required).
GET /api/v2/users/current Gets account information on the currently logged-in user.
GET /api/v2/users/{username} Gets account information on a user.
PUT /api/v2/users/{username} Changes account information on a user.
DELETE /api/v2/users/{username} Deletes an account (Admin role required)
PUT /api/v2/users/{username}/password Changes an account password for Guests; old password required, and Guests can only change their own account.

For information on managing users with the Cloudera Director API, see the server API documentation at director-server-hostname:7189/api-console. Expand the section labeled users.