Assigning resources to users

Assign a user or a machine user a resource role on the scope of a Cloudera environment to grant the user access to the resources they need to perform their required tasks.

Steps

Cloudera Management Console

  1. Sign in to the Cloudera console.
  2. Click Cloudera Management Console.
  3. Click Environments.
  4. In the list of environments that appear, select your environment by clicking on it.

    The Environment Clusters page appears.

  5. Click Actions.
  6. Click Manage Access in the dropdown list.
  7. In the Access tab, enter the name of the user in the Select group or user text box.

    The Update Resource Roles window appears.

  8. Select the required resource role.
  9. Click Update Roles.

CLI

You can use the following command to assign a resource role to a user or a machine user:
cdp iam assign-user-resource-role \
--user-name <value> \
--resource-role-crn <value> \
--resource-crn <value> 
cdp iam assign-machine-user-resource-role \
--machine-user-name <value> \
--resource-role-crn <value> \
--resource-crn <value>
To remove a resource role from a user or a machine user:
cdp iam unassign-user-resource-role \
--user-name <value> \
--resource-role-crn <value> \
--resource-crn <value>
cdp iam unassign-machine-user-resource-role \
--machine-user-name <value> \
--resource-role-crn <value> \
--resource-crn <value>
To get a list of the resource roles assigned to a user or a machine user:
cdp iam list-user-assigned-resource-role \
--user-name <value>
cdp iam list-machine-user-assigned-resource-role \
--machine-user-name <value>