About Database Objects Permissions
DataStax Enterprise (DSE) supports Role-Based Access Control (RBAC) to ensure that only authorized users can access database resources. To configure RBAC, you must create roles, and then grant permissions to those roles.
Permissions can be granted directly to a role, or they can be inherited by assigning a role to another role.
After creating a role, use the following CQL commands to manage permissions:
DSE RBAC uses a modeled hierarchy where granting permission on a parent object inherently grants permission on associated child objects.
The permissions available to an object type depend on the actions that can be performed on that object type. Not all permissions are relevant to all objects.
For information about the relationship between privileges, resources, and permissions, see the following:
- Data resources
-
Syntax for authorizing access to keyspaces, tables, rows, and types.
- Functions and aggregate resources
-
Syntax for authorizing access to user-defined function and aggregate.
- Search indexes
-
Syntax for authorizing access to search indexes.
- Roles
-
Syntax for authorizing role management.
- Proxy login and execute
-
Syntax for authorizing proxy logins and executes.
- Authentication scheme resources
-
Syntax for authorizing roles for an authentication scheme.
- JMX resources (MBeans) for DSE utilities
-
Syntax for authorizing access to MBeans from DSE utilities and third-party tools.
- Analytic applications
-
Syntax for authorizing Apache Spark™ applications.
- Remote procedure calls
-
Syntax for authorizing remote procedure calls.
