Managing roles
- About roles
-
Define roles and configure permissions to control access to database resources for authenticated users.
- Add a superuser role
-
After enabling role-based access control, create your own superuser role, and then disable or drop the default
cassandrarole. - Creating roles for internal mode
-
Set up the primary login roles for users and accounts that are authenticated against the DSE database.
- Creating roles for LDAP mode
-
Create roles that match group names in the LDAP server to manage role assignment with LDAP.
- Creating roles for Kerberos principals
-
Create roles to match Kerberos principal name.
- Binding a role to an authentication scheme
-
Prevent unintentional role assignment when a group name or user name is found in multiple schemes.
- Configuring proxy roles for applications
-
Proxy roles allow an authenticated role to run CQL statements using a different role.
