Set permissions to run the DataStax Agent as the DSE user

If you manually install the DataStax Agent, you must manually configure the agent to run as the DSE user in your cluster, and you must set permissions for this user.

When DSE is installed, it creates a cassandra user in the database and runs as this user by default. It also creates a cassandra user in the operating system.

Don’t use the default cassandra users in production for either the database or operating system. Using these cassandra users is a security risk.

The following read and write permissions are required for the user or group that runs the agent:

Required permissions for the user running the DataStax Agent
Operations	Permissions
General DataStax Agent functionality	Read permission to `cassandra.yaml`, which is located at `/etc/dse` for DSE package installations and `install_location/conf` for DSE tarball installations.
Configure a cluster	Read/write permissions to configuration directories and files, which are located at `/etc/dse` for DSE package installations and `install_location/conf` for DSE tarball installations.
Backup and restore	Read/write permissions to configuration directories and files. Read/write permissions to data directories, which are located at `/var/lib/cassandra` by default. If you changed this location in `cassandra.yaml`, use your custom location instead. A umask must be set to accommodate group permissions for new tables and data because DSE creates new directories and files as 0700 by default, which doesn’t grant read or write permissions. To configure the umask, edit the `dse-env.sh` or `cassandra-env.sh` file, and then add the command `umask 002` to the top of the file. The file you need to edit and its location depends on your installation type and environment: `dse-env.sh` is located at `/etc/dse/` or `install_location/conf/` depending on your installation type. `cassandra-env.sh` is located at `/etc/dse/cassandra` or `install_location/conf/` depending on your installation type. If commit log archiving is enabled, the DSE process must also have permissions to run the agent’s archive script, and write permissions to the configured backup directory. The archive script is located at `/usr/share/datastax-agent/bin/archive_commitlog.sh` for agents installed from a package or `install_location/bin/archive_commitlog.sh` for agents installed from a tarball.

Set permissions to run the DataStax Agent as the DSE user

Was this helpful?

Give Feedback