Cloudera Navigator Data Management Component User Roles

User roles determine the Cloudera Navigator features visible to the user and the actions the user can perform.

The menus displayed in the upper right indicate the user's access to Cloudera Navigator features, as determined by the roles associated with the user's LDAP or Active Directory groups. For example, a user that belongs to a group with the Full Administrator role sees the Search, Audits, Analytics, Policies, and Administration tabs. A user that belongs to a group with the Policy Administrator role sees only the Search, Analytics (metadata), and Policies tabs.

User Roles

A Cloudera Navigator user account can be assigned one of the following user roles with associated permissions:
  • Auditing Viewer - View audit events and audit analytics and create audit reports.
  • Full Administrator - Full access, including role assignments to groups.
  • Lineage Viewer - Search for entities, view metadata, and view lineage and metadata analytics.
  • Metadata Administrator - Search for entities, view metadata, view lineage, view metadata analytics, edit custom metadata, edit managed metadata.
  • Custom Metadata Administrator - Search for entities, view metadata, view metadata analytics, and edit custom metadata.
  • Policy Administrator - Search for entities, view metadata, edit metadata and metadata policies, configure and perform command actions, and view metadata analytics.
  • Policy Viewer - View metadata policies.
  • User Administrator - Administer role assignments to groups.
The user roles and associated permissions are summarized as follows:
 

Permissions
User role

View analytics

 View audit events and create reports View lineage Search metadata Edit custom metadata Edit managed metadata View policies Edit policies Configure and perform command actions Administer role group mapping View maintenance history Start maintenance job

Auditing
Viewer

 Yes (Audit analytics) Yes No No No No No No No No No No
Full Administrator Yes (All analytics) Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

Lineage
Viewer

 Yes (Metadata analytics) No Yes Yes No No No No No No No No

Metadata
Administrator

 Yes (Metadata analytics) No Yes Yes Yes Yes No No No No No No
Custom Metadata Administrator Yes (Metadata analytics) No No Yes Yes No No No No No No No

Policy
Administrator

 Yes (Metadata analytics) No No Yes Yes No Yes Yes Yes No No No

Policy
Viewer

 No No No No No No Yes No No No No No
User Administrator No No No No No No No No No Yes No No

Determining the Roles of the Logged-in User

To display the Cloudera Navigator user roles for the logged-in user:

  1. In the upper right, select username > My Roles. The Roles pop-up window displays all roles assigned to the LDAP or Active Directory groups to which the current user belongs.
  2. Click Close to dismiss the window.