Create opscenter role with SELECT permissions for the monitored DSE cluster:

CREATE ROLE opscenter WITH PASSWORD = 'opscenter' AND SUPERUSER = false AND LOGIN = true;
GRANT SELECT ON TABLE system.local TO opscenter;
GRANT SELECT ON TABLE system.peers TO opscenter;

Create agent role with SELECT permissions for the monitored DSE cluster:

CREATE ROLE agent WITH PASSWORD = agent AND SUPERUSER = false AND LOGIN = true;
GRANT SELECT ON TABLE system.local TO agent;
GRANT SELECT ON TABLE system.peers TO agent;
GRANT SELECT ON TABLE dse_perf.node_slow_log TO agent;

Create opscenter role with ALL permissions.

If you plan to enable or disable NodeSync for specific tables using OpsCenter NodeSync Service, grant the opscenter role with ALTER permissions for those tables:

GRANT ALTER ON TABLE keyspace_name.table_name TO opscenter;

To allow OpsCenter to restore DataStax Graphs for DSE 6.7 and earlier, grant the opscenter role with MODIFY, SELECT, and ALTER permissions for dse_system.shared_data:

GRANT MODIFY, SELECT, ALTER ON TABLE dse_system.shared_data TO opscenter;

To allow OpsCenter to restore DataStax Graphs for DSE 6.8, grant the opscenter role with UPDATE, SELECT, and ALTER permissions for dse_system.shared_data:

GRANT UPDATE, SELECT, ALTER ON TABLE dse_system.shared_data TO opscenter;

For DSE 6.7 and earlier Search clusters, grant the agent role with SELECT and MODIFY permissions for solr_admin.solr_resources:

GRANT SELECT, MODIFY ON TABLE solr_admin.solr_resources TO agent;

For DSE 6.8 Search clusters, grant the agent role with SELECT and UPDATE permissions for solr_admin.solr_resources:

GRANT SELECT, UPDATE ON TABLE solr_admin.solr_resources TO agent;