Setting up Logins and Users
The DataStax Enterprise (DSE) database uses Role-Based Access Control (RBAC). Set up roles to manage access control for database objects.
|
The default |
- Adding a superuser login
-
After enabling role-based access control, create your own superuser login and disable or drop the default
cassandralogin. - Adding database users
-
Set up the primary login roles for users who are authenticated against the DSE database.
- Internally stored passwords
-
Learn how DSE protects internally stored passwords for database users.
- Adding roles for LDAP users and groups
-
Create roles to match LDAP user ids or group names.
- Adding roles for Kerberos principals
-
Create roles to match the Kerberos principal name.
- Setting up roles for applications
-
Proxy roles allow an authenticated account (role) to run
CQLstatements using a different role. - Binding a role to an authentication scheme
-
Prevent unintentional role assignment when a group name or user name is found in multiple schemes.
