tencent cloud

Elastic MapReduce

  • Release Notes and Announcements
  • Product Introduction
  • Purchase Guide
    • EMR on CVM Billing Instructions
    • EMR on TKE Billing Instructions
    • EMR Serverless HBase Billing Instructions
    • EMR Serverless TCBase Billing Overview
  • Getting Started
  • EMR on CVM Operation Guide
    • Planning Cluster
    • Administrative rights
    • Configuring Cluster
    • Managing Cluster
    • Managing Service
    • Monitoring and Alarms
    • TCInsight
  • EMR on TKE Operation Guide
  • EMR Serverless HBase Operation Guide
  • EMR Serverless TCBase Operation Guide
  • EMR Development Guide
    • Hadoop Development Guide
    • Spark Development Guide
    • Hbase Development Guide
    • Phoenix on Hbase Development Guide
    • Hive Development Guide
    • Presto Development Guide
    • Sqoop Development Guide
    • Hue Development Guide
    • Oozie Development Guide
    • Flume Development Guide
    • Kerberos Development Guide
    • Knox Development Guide
    • Alluxio Development Guide
    • Kylin Development Guide
    • Livy Development Guide
    • Kyuubi Development Guide
    • Zeppelin Development Guide
    • Hudi Development Guide
    • Superset Development Guide
    • Impala Development Guide
    • Druid Development Guide
    • TensorFlow Development Guide
    • Kudu Development Guide
    • Ranger Development Guide
    • Kafka Development Guide
    • StarRocks Development Guide
    • Flink Development Guide
    • JupyterLab Development Guide
    • MLflow Development Guide
  • Practical Tutorial
    • Practice of EMR on CVM Ops
    • Data Migration
    • Practical Tutorial on Custom Scaling
  • API Documentation
    • History
    • Introduction
    • API Category
    • Making API Requests
    • Cluster Resource Management APIs
    • Cluster Services APIs
    • User Management APIs
    • Information Query APIs
    • Scaling APIs
    • Configuration APIs
    • Other APIs
    • Cluster Lifecycle APIs
    • Serverless HBase APIs
    • YARN Resource Scheduling APIs
    • Data Types
    • Error Codes
  • FAQs
    • EMR on CVM
  • Service Level Agreement
  • Contact Us

Managing Permissions

Download
フォーカスモード
フォントサイズ
最終更新日: 2024-11-28 16:22:15
This article explains how to authorize a service role and sub-user when using EMR Serverless HBase.

Authorizing a Service Role

When using EMR Serverless HBase for the first time, you need to authorize the EMR service role EMR_QCSRole for the EMR product so that the EMR can call the necessary product features for the required permissions.
1. Log in to the EMR Serverless HBase Console. When using it for the first time, you will be prompted to authorize EMR. Click Authorize to go to the role management authorization page.
2. After confirming the service authorization information, click Authorize to complete the service role authorization.
Note:
When using for the first time, ensure that the sub-user or collaborator account has been granted the QcloudCamSubaccountsAuthorizeRoleFullAccess permission.

Authorizing Sub-User

In actual product use, the main accounts are usually collaborators or sub-users. Depending on the authorization requirements, different granular operational permissions can be granted to sub-users or collaborators through the following methods.
Authorization Plan
Applicable Scenario
Operation Step
Authorization based on preset permissions
Applicable to configuring sub-user management permissions of all instances.
Through the EMR Serverless HBase preset policy, quickly grant sub-users the QcloudEMRFullAccess permission, giving the sub-user management permissions for all EMR resources.
Operation-based authorization
Applicable to configuring partial operational permissions of all instances for specific sub-users.
Create a new CAM custom policy to grant sub-users partial operational permissions for the product. For details, see
General authorization based on tags
Applicable to configuring sub-user management permissions for instances of different ownership through tags.
1.Set instance tag: Add an ownership tag when creating the instance.
2.Set sub-user permissions: Create a new CAM custom policy to grant sub-users partial operational permissions for specific instances. For details, see Create a Custom Policy with Policy Syntax.





































































ヘルプとサポート

この記事はお役に立ちましたか?

フィードバック