Users, roles, and privileges
If you are a Management Console (MC) administrator, you can use MC Settings to grant MC users privileges to one or more Vertica users.
Users
MC users are not the same as system (Linux) users. MC users are external to the database, and their information is stored on an internal database on the MC application or web server. See Users in Management Console for further details.
The MC super account is the default user. The super user needs to create all other MC users.
You can create MC users using either of two authentication techniques, LDAP or MC (internal). See Creating an MC user. After you create the MC users, you can manage them from MC Settings page. Refer to Managing MC users.
To control the level of access for the MC Users, you can grant them privileges (through roles) from the MC Settings page.
Roles and privileges
You control user access to MC through groups of privileges (also referred to as access levels) that fall into two types, those that apply to MC configuration, and those that apply to MC-managed Vertica databases.
MC permission groups
-
MC configuration privileges are made up of roles that control what users can configure on the Management Console, such as modify MC settings, create and import Vertica databases, restart MC, create a Vertica cluster through the MC interface, and create and manage MC users.
-
MC database privileges are made up of roles that control what users can see or do on a Vertica database monitored by MC, such as view the database cluster state, query and session activity, monitor database messages and read log files, replace cluster nodes, and stop databases.
Note
When you grant an MC user a database role, that user inherits the privileges assigned to the database user account to which the MC user is mapped. For maximum access, use the dbadmin username and password.MC database privileges cannot alter or override the Vertica database user's privileges and roles.
Note
If TLS/SSL is configured in mutual mode on the Vertica database, each MC user must be configured with an individual client certificate and private key, to log into the database from MC. See Configuring mutual TLS for MC users. If the individual certificate has not been configured, you see an error message. See your Management Console administrator.See also
- Users in Management Console
- Creating an MC user
- Database privileges
- Creating an MC user
- Granting database access to MC users