You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@nifi.apache.org by kumar r <ku...@gmail.com> on 2017/03/23 06:54:40 UTC
Admin policies not set by default
Hi,
I have configured NiFi-1.1.1 with authentication. When accessing NiFi web
UI with admin user, i can't able to do some operations and it shows like
"user not allowed to perform this operation".
When i go to policies and set policy for admin user, everything works fine.
For example, Admin couldn't view system diagnostic without policy settings.
By default, admin should have full privilege to access NiFi right? But why
should i add policies to admin manually.
Is there any option to add users with full privilege?
Thanks in advance.
Re: Admin policies not set by default
Posted by Matt Gilman <ma...@gmail.com>.
There is no option to add users with full privilege. Setting the initial
admin identity will give that user access to the UI and permissions to
manage users, groups, and policies. Additionally, if the NiFi instance has
an existing flow it will grant permissions to the root group. Otherwise,
the admin will need to grant those permissions explicitly.
https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#authorizers-setup
Matt
On Thu, Mar 23, 2017 at 3:24 AM, kumar r <ku...@gmail.com> wrote:
> Yes i have set Initial Admin Identity before first time itself. Is this a
> behavior or issue? I doubt that missed anything.
>
> On Thu, Mar 23, 2017 at 12:32 PM, Andy LoPresto <
> alopresto.apache@gmail.com> wrote:
>
>> Did you add that user as the Initial Admin Identity in authorizers.xml
>> before the first time you tried to access the UI? If so, please file a Jira
>> issue, as all default permissions should be applied to that user.
>>
>> Andy LoPresto
>> alopresto@apache.org
>> alopresto.apache@gmail.com
>> PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4 BACE 3C6E F65B 2F7D EF69
>>
>> On Mar 22, 2017, at 23:54, kumar r <ku...@gmail.com> wrote:
>>
>> Hi,
>>
>> I have configured NiFi-1.1.1 with authentication. When accessing NiFi web
>> UI with admin user, i can't able to do some operations and it shows like
>> "user not allowed to perform this operation".
>>
>> When i go to policies and set policy for admin user, everything works
>> fine.
>>
>> For example, Admin couldn't view system diagnostic without policy
>> settings.
>>
>> By default, admin should have full privilege to access NiFi right? But
>> why should i add policies to admin manually.
>>
>> Is there any option to add users with full privilege?
>>
>> Thanks in advance.
>>
>>
>
Re: Admin policies not set by default
Posted by kumar r <ku...@gmail.com>.
Yes i have set Initial Admin Identity before first time itself. Is this a
behavior or issue? I doubt that missed anything.
On Thu, Mar 23, 2017 at 12:32 PM, Andy LoPresto <al...@gmail.com>
wrote:
> Did you add that user as the Initial Admin Identity in authorizers.xml
> before the first time you tried to access the UI? If so, please file a Jira
> issue, as all default permissions should be applied to that user.
>
> Andy LoPresto
> alopresto@apache.org
> alopresto.apache@gmail.com
> PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4 BACE 3C6E F65B 2F7D EF69
>
> On Mar 22, 2017, at 23:54, kumar r <ku...@gmail.com> wrote:
>
> Hi,
>
> I have configured NiFi-1.1.1 with authentication. When accessing NiFi web
> UI with admin user, i can't able to do some operations and it shows like
> "user not allowed to perform this operation".
>
> When i go to policies and set policy for admin user, everything works fine.
>
> For example, Admin couldn't view system diagnostic without policy
> settings.
>
> By default, admin should have full privilege to access NiFi right? But why
> should i add policies to admin manually.
>
> Is there any option to add users with full privilege?
>
> Thanks in advance.
>
>
Re: Admin policies not set by default
Posted by Andy LoPresto <al...@gmail.com>.
Did you add that user as the Initial Admin Identity in authorizers.xml before the first time you tried to access the UI? If so, please file a Jira issue, as all default permissions should be applied to that user.
Andy LoPresto
alopresto@apache.org
alopresto.apache@gmail.com
PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4 BACE 3C6E F65B 2F7D EF69
> On Mar 22, 2017, at 23:54, kumar r <ku...@gmail.com> wrote:
>
> Hi,
>
> I have configured NiFi-1.1.1 with authentication. When accessing NiFi web UI with admin user, i can't able to do some operations and it shows like "user not allowed to perform this operation".
>
> When i go to policies and set policy for admin user, everything works fine.
>
> For example, Admin couldn't view system diagnostic without policy settings.
>
> By default, admin should have full privilege to access NiFi right? But why should i add policies to admin manually.
>
> Is there any option to add users with full privilege?
>
> Thanks in advance.