Access paths to Cloudera and its components

To access the various Cloudera components, you must understand the access paths unique to the entry points that are specific to users and situations.

The typical access entry methods and their details are as follows:

SSO access through Cloudera Management Console - After the initial identity provider configuration, users can access Cloudera and its SSO-interfaces through the Cloudera Management Console. You can access various Cloudera services including Cloudera Management Console, Cloudera AI Workbenches, Cloudera Data Catalog, Cloudera Replication Manager, Cloudera Data Hub, and Data Lakes.
Accessing non-SSO interfaces using workload password - You must set your workload password to add the user credentials to the IPA server. Using the workload username and workload password, you can access non-SSO interfaces such as SSH to clusters, JDBC connections, REST APIs, Cloudera Data Warehouses, and so on.
note
To access Cloudera AI workbenches, you can enter the kerberos principal and the workload password, and gain kerberized access to components such as the HMS.
Accessing CDP CLI using access keys - On the User Management section of the Cloudera Management Console, you can generate your access keys. Use these access keys for CDP CLI and for running jobs.
Machine user access - To get programmatic access to Cloudera and its services, you can create and use a machine user. The process to set up the machine user for access is as follows:
- Create a machine user in the User Management section of Cloudera Management Console.
- Get access keys in the Cloudera Management Console for this machine user.
- Use APIs and CDP CLI to set the workload password for the machine user.
SSH access - There are two types of SSH access:
- Admin users who create Environments can access the environments directly using the SSH key access.
- All users can access workload clusters by using their SSH keys previously uploaded in Cloudera.