Creating a Kafka Role¶
Scenario¶
This section describes how to create and configure a Kafka role.
This section applies to MRS 3.x or later.
Note
Users can create Kafka roles only in security mode.
If the current component uses Ranger for permission control, you need to configure permission management policies based on Ranger. For details, see Adding a Ranger Access Permission Policy for Kafka.
Prerequisites¶
The system administrator has understood the service requirements.
Procedure¶
Log in to FusionInsight Manager and choose System > Permission > Role.
On the displayed page, click Create Role and enter a Role Name and Description.
On the Configure Resource Permission page, choose Name of the desired cluster > Kafka.
Select permissions based on service requirements. For details about configuration items, see Table 1.
Table 1 Description¶ Scenario
Role Authorization
Setting the Kafka administrator permissions
In the Configure Resource Permission table, choose Name of the desired cluster > Kafka > Kafka Manager Privileges.
Note
This permission allows you to create and delete topics, but does not allow you to produce or consume any topics.
Setting the production permission of a user on a topic
In the Configure Resource Permission table, choose Name of the desired cluster > Kafka > Kafka Topic Producer And Consumer Privileges.
In the Permission column of the specified topic, select Kafka Producer Permission.
Setting the consumption permission of a user on a topic
In the Configure Resource Permission table, choose Name of the desired cluster > Kafka > Kafka Topic Producer And Consumer Privileges.
In the Permission column of the specified topic, select Kafka Consumer Privileges.
Click OK, and return to the Role page.