Authorizing users to access Cruise Control in SMM

Learn how to authorize users to access the Cruise Control UI in Streams Messaging Manager (SMM). This is required to enable users access the UI or manage rebalancing. You can set access by assigning users the required authorization levels.

The integration between SMM and Cruise Control is automatic. The Cruise Control User Interface (UI) can be accessed through an SMM instance running on the same cluster as Cruise Control. In environments where security is disabled, anyone will be able to access Cruise Control in SMM. In secured environments, users need to be added to the authorization level groups before they can see the Cruise Control UI. The group a user belongs to determines what they are allowed to do in the UI.

Select the Cruise Control service in Cloudera Manager.
Click Configuration.
Search for auth_admins, auth_users or auth_viewers based on which authorization level is needed.
Assign users to the required authorization level.
Based on the authorization level, users have the following access to Cruise Control in SMM:
- Viewer level users: can only view the metrics
- User level users: includes Viewer level permissions and manage goals, estimations
- Admin level users: includes Viewer and User level permissions, starting and stopping rebalance
note
The assigned authorization level for a user can be checked with the permissions endpoint:
```
curl -X GET "http://<cruise_control_hostname>:8899/kafkacruisecontrol/kafkacruisecontrol/permissions”
```
Click Save changes.

Cruise Control is visible in SMM. Users can access the Cruise Control UI using the

on the navigation sidebar.