azkaban group分組，權限

翻譯自：https://azkaban.readthedocs.io/en/latest/userManager.html?highlight=group

1.job project，名爲"e",分享給某人看，下圖位置中添加那我的帳號便可(可在lmk帳號登陸，並在 projects>>Personal>>看到那個項目e)

2.分享到組內，group，也是一樣的方式一樣位置(以下圖)，在Group下add一個名爲跟g2park的group name,

並在azkaban-web-server/con/azkaban-user.xml下添加一個分組g2park ,並分配好權限

<azkaban-users>
  <user groups="azkaban" password="azkaban" roles="admin" username="azkaban"/>
  <user password="metrics" roles="metrics" username="metrics"/>
  <group name="g2park" roles="g2park_role" />

  <user username="admin" password="123" groups="g2park" roles="admin,metrics" />
  <user username="ht" password="123" groups="g2park"  />
  <user username="lmk" password="123" groups="g2park" />

  <role name="admin" permissions="ADMIN"/>
  <role name="metrics" permissions="METRICS"/>
  <role name="g2park_role" permissions="READ,WRITE,EXECUTE,SCHEDULE" />
</azkaban-users>

上面xml配置中的分組g2park與網頁上的分組名字對應，重啓azkaban-web-server服務，同一個分組下就能看到了，

即，ht帳號分享project到是group裏，lmk帳號登錄後，可在Projects>>Group下看到

3.此外，建立分享權限時候有幾個權限能夠勾選，

如下是官網關於權限的一些說明以下：

1）xml中user帳號的roles權限和所在groups中的roles權限，取合集

2）權限分爲 ADMIN，READ,WRITE,EXECUTE,SCHEDULE 

Roles

Roles are different in that it assigns global permissions to users in Azkaban. You can set up roles with the <roles> tag.:

<azkaban-users>
  <user username="a" ... groups="groupa" roles="readall" / >
  <user username="b" ... / >
  ...
  <group name="groupa" roles="admin" / >
  ...
  <role name="admin" permissions="ADMIN" / >
  <role name="readall" permissions="READ" / >
</azkaban-users>

 

In the above example, user ‘a’ has the role ‘readall’, which is defined as having the READ permission. This means that user ‘a’ has global READ access on all the projects and executions.

User ‘a’ also is in ‘groupa’, which has the role ADMIN. It’s certainly redundant, but user ‘a’ is also granted the ADMIN role on all projects.

The possible role permissions are the following:

Permissions	Values
ADMIN	Grants all access to everything in Azkaban.
READ	Gives users read only access to every project and their logs
WRITE	Allows users to upload files, change job properties or remove any project
EXECUTE	Allows users to trigger the execution of any flow
SCHEDULE	Users can add or remove schedules for any flows
CREATEPROJECTS	Allows users to create new projects if project creation is locked down