Change user groups

Learn how to manage user groups in Exasol.

User groups are used to manage which administrative tasks a user can do in Exasol. You can change the type of tasks users can do by changing the user group they belong to, or by adding them to additional groups.

When you first create a user, you must specify a primary group for the user. You can then change the user’s primary group or add them to additional groups as needed.

The ability to run ConfD jobs is determined by which group the user belongs to. Select a primary group that is able to perform all or most of the jobs that the user will need to run regularly. Each job description in the ConfD reference documentation explains which group the user must belong to in order to execute the job.

To identify available groups, use the ConfD job group_list. The following groups are included by Exasol:

Group Description
exaadm Exasol system administrator
exabfsadm Exasol BucketFS administrator
exadbadm Exasol database administrator
exastoradm Exasol storage administrator
exausers Exasol users
root The root user

Prerequisites

To perform this task you must be a member of the exaadm group.

Procedure

This procedure uses confd_client, which is available on all database nodes. You can also access ConfD through XML-RPC in your own Python programs. For more information, see ConfD.

Placeholder values are indicated with UPPERCASE characters. Replace the placeholders with your own values.

  1. Connect to the cluster operating system (COS) using c4 connect -i PLAY_ID -s cos.

    Example:
    Copy 
    ./c4 connect -i c3275f84 -s cos

    To find the play ID, you can use c4 ps.

    For more information about how to use c4 commands, see How to use c4.

  2. To modify the groups the user belongs to, use the ConfD job user_modify with the following parameters:

    Parameter name Data type Description
    username string Name of the user to modify
    group string, integer Group ID or group name for the user’s primary group
    additional_groups list Comma-separated list of group names of additional groups that the user should be a member of.

    For example:

    Copy 
    confd_client user_modify username: admin4 group: exabfsadm additional_groups: '[exastoradm, exausers]'

Verification

To view the groups that a user belongs to, use the ConfD job user_list:

Copy 
confd_client user_list

In the following example, the user admin4 has the primary group exabfsadm and also belongs to exastoradm and exausers:

Copy 
confd_client user_list
...
admin4:
 additional_groups:
  - exastoradm
  - exausers
...
  group: exabfsadm
  id: 1004
  login_enabled: true
Copy