Setting up Logins and Users
The DataStax Enterprise (DSE) database uses Role-Based Access Control (RBAC). Set up roles to manage access control for database objects.
- Add a superuser role
-
After enabling role-based access control, create your own superuser role, and then disable or drop the default
cassandrarole. - Add database users
-
Set up the primary login roles for users and accounts that are authenticated against the DSE database.
- Internally stored passwords
-
Learn how DSE protects internally stored passwords for database roles.
- Adding roles for LDAP users and groups
-
Create roles to match LDAP user ids or group names.
- Adding roles for Kerberos principals
-
Create roles to match the Kerberos principal name.
- Setting up roles for applications
-
Proxy roles allow an authenticated role to run CQL statements using a different role.
- Binding a role to an authentication scheme
-
Prevent unintentional role assignment when a group name or user name is found in multiple schemes.
