Enabling admin and user access to environments

To get admin access to a fully-functional environment, follow this procedure to create an environment and assign admin and user groups to the environment successfully.

Initial tasks to be performed by the PowerUser

  1. A CDP user with PowerUser role creates an environment.
  2. The PowerUser assigns the EnvironmentAdmin resource role to the intended admin user(s).

    Additionally the MLAdmin and/or DWAdmin resource rolea should be be assigned if admin access to the Data Warehouse nad Machine Learning service is needed.

    The resource role assignment can be performed from the Management Console > Environments > navigate to your environment > Actions > Manage Access. For instructions, refer to Assigning resources to users.

  3. The PowerUser associates an existing group to the EnvironmentUser resource role for this environment.

    Additionally MLUser role should be assigned if user access to Machine Learning workspaces is needed.

    The resource role assignment can be performed from the Management Console > Environments > navigate to your environment > Actions > Manage Access. For instructions, refer to Assigning resources to users.

  4. The PowerUser performs user sync after assigning the roles.

    The user sync can be performed from the Management Console > Environments > navigate to a specific environment > Actions > Synchronize Users to FreeIPA.

Tasks to be performed by the admin

  1. The admin sets his/her password for IPA.

    The IPA password can be set from the Management Console > Environments > navigate to your environment > Actions > Manage Access > FreeIPA Cnfigurartion. For instructions, refer to Setting the IPA Password.

  2. The admin logs into Ranger and gets admin privileges.
  3. The admin logs into Ranger and modifies policies and other admin privileges.

Tasks to be performed by the users

  1. The users need to set their IPA passwords.

    The IPA password can be set from the Management Console > Environments > navigate to your environment > Actions > Manage Access > FreeIPA Cnfigurartion. For instructions, refer to Setting the IPA Password.