Setting up Logins and Users

The DataStax Enterprise database uses Role-Based Access Control (RBAC). Set up roles to manage access control for database objects.

The default cassandra role has the same credentials in all environments. DataStax recommends locking down the cluster using firewall rules to prevent malicious activity until a new root account is established.

Adding a superuser login: After enabling role-based access control, create your own superuser login and disable or drop the default cassandra login.
Adding database users: Set up the primary login roles for users that are authenticated against the DSE database.
Adding roles for LDAP users and groups: Create roles to match LDAP user ids or group names.
Adding roles for Kerberos principals: Create roles to match the Kerberos principal name.
Setting up roles for applications: Proxy roles allow an authenticated account (role) to run CQL statements using a different role.
Binding a role to an authentication scheme: Prevent unintentional role assignment when a group name or user name is found in multiple schemes.