Mailing-List: contact dev-help@ambari.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@ambari.apache.org
Date: Fri, 22 May 2015 20:20:19 +0000 (UTC)
From: "Jeff Sposetti (JIRA)" <jira@apache.org>
To: dev@ambari.apache.org
Message-ID: <JIRA.12832257.1432325991000.13463.1432326019481@Atlassian.JIRA>
In-Reply-To: <JIRA.12832257.1432325991000@Atlassian.JIRA>
References: <JIRA.12832257.1432325991000@Atlassian.JIRA>
 <JIRA.12832257.1432325991457@arcas>
Subject: [jira] [Created] (AMBARI-11350) Ambari finer-grainded authorization
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Jeff Sposetti created AMBARI-11350:
--------------------------------------

             Summary: Ambari finer-grainded authorization
                 Key: AMBARI-11350
                 URL: https://issues.apache.org/jira/browse/AMBARI-11350
             Project: Ambari
          Issue Type: Improvement
          Components: ambari-server
    Affects Versions: 2.0.0
            Reporter: Jeff Sposetti


Ambari to provider role-based access controls beyond today's Ambari Admin, Operator and Read-Only permissions.

|| Role || Description ||
| Read-only | This exists as of Ambari 2.0. Read-only view of cluster information, including configurations, service status and health alerts|
| *Service Administrator* | Provides control of service lifecycle (start/stop/restart/decomm/recom) |
| *Service Operator* | Service Admin + ability to re-configure (change/compare/revert), configure HA |
| *Cluster Operator* | Service Operator + enable/disable kerberos, modify alerts, add service, perform upgrade |
| Operator | This exists as of Ambari 2.0. Full cluster control.|
| Ambari Admin | This exists as of Ambari 2.0. Full cluster control + manage user, groups and views and this flag is applicable to any user regardless of Role |


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)