Authorizing users to access Cruise Control in Streams Messaging Manager

Learn how to authorize users to access the Cruise Control UI in Streams Messaging Manager. This is required to enable users access the UI or manage rebalancing. You can set access by assigning users the required authorization levels.

The integration between Streams Messaging Manager and Cruise Control is automatic. The Cruise Control User Interface (UI) can be accessed through an Streams Messaging Manager instance running on the same cluster as Cruise Control. In environments where security is disabled, anyone will be able to access Cruise Control in Streams Messaging Manager. In secured environments, users need to be added to the authorization level groups before they can see the Cruise Control UI. The group a user belongs to determines what they are allowed to do in the UI.

Select the Cruise Control service in Cloudera Manager.
Click Configuration.
Search for auth_admins, auth_users or auth_viewers based on which authorization level is needed.
Assign users to the required authorization level.
Based on the authorization level, users have the following access to Cruise Control in Streams Messaging Manager:
- Viewer level users: can only view the metrics
- User level users: includes Viewer level permissions and manage goals, estimations
- Admin level users: includes Viewer and User level permissions, starting and stopping rebalance
note
The assigned authorization level for a user can be checked with the permissions endpoint:
```
curl -X GET "http://<cruise_control_hostname>:8899/kafkacruisecontrol/kafkacruisecontrol/permissions”
```
Click Save changes.

Cruise Control is visible in Streams Messaging Manager. Users can access the Cruise Control UI using the

on the navigation sidebar.