tencent cloud

Elastic MapReduce

Release Notes and Announcements
Release Notes
Announcements
Security Announcements
Product Introduction
Overview
Strengths
Architecture
Features
Use Cases
Constraints and Limits
Technical Support Scope
Product release
Purchase Guide
EMR on CVM Billing Instructions
EMR on TKE Billing Instructions
EMR Serverless HBase Billing Instructions
Getting Started
EMR on CVM Quick Start
EMR on TKE Quick Start
EMR on CVM Operation Guide
Planning Cluster
Administrative rights
Configuring Cluster
Managing Cluster
Managing Service
Monitoring and Alarms
TCInsight
EMR on TKE Operation Guide
Introduction to EMR on TKE
Configuring Cluster
Cluster Management
Service Management
Monitoring and Ops
Application Analysis
EMR Serverless HBase Operation Guide
EMR Serverless HBase Product Introduction
Quotas and Limits
Planning an Instance
Managing an Instance
Monitoring and Alarms
Development Guide
EMR Development Guide
Hadoop Development Guide
Spark Development Guide
Hbase Development Guide
Phoenix on Hbase Development Guide
Hive Development Guide
Presto Development Guide
Sqoop Development Guide
Hue Development Guide
Oozie Development Guide
Flume Development Guide
Kerberos Development Guide
Knox Development Guide
Alluxio Development Guide
Kylin Development Guide
Livy Development Guide
Kyuubi Development Guide
Zeppelin Development Guide
Hudi Development Guide
Superset Development Guide
Impala Development Guide
Druid Development Guide
TensorFlow Development Guide
Kudu Development Guide
Ranger Development Guide
Kafka Development Guide
Iceberg Development Guide
StarRocks Development Guide
Flink Development Guide
JupyterLab Development Guide
MLflow Development Guide
Practical Tutorial
Practice of EMR on CVM Ops
Data Migration
Practical Tutorial on Custom Scaling
API Documentation
History
Introduction
API Category
Cluster Resource Management APIs
Cluster Services APIs
User Management APIs
Data Inquiry APIs
Scaling APIs
Configuration APIs
Other APIs
Serverless HBase APIs
YARN Resource Scheduling APIs
Making API Requests
Data Types
Error Codes
FAQs
EMR on CVM
Service Level Agreement
Contact Us
문서Elastic MapReduceEMR Serverless HBase Operation GuideManaging an Instance Managing Permissions

Managing Permissions

PDF
포커스 모드
폰트 크기
마지막 업데이트 시간: 2024-11-28 16:22:15
This article explains how to authorize a service role and sub-user when using EMR Serverless HBase.

Authorizing a Service Role

When using EMR Serverless HBase for the first time, you need to authorize the EMR service role EMR_QCSRole for the EMR product so that the EMR can call the necessary product features for the required permissions.
1. Log in to the EMR Serverless HBase Console. When using it for the first time, you will be prompted to authorize EMR. Click Authorize to go to the role management authorization page.
2. After confirming the service authorization information, click Authorize to complete the service role authorization.
Note:
When using for the first time, ensure that the sub-user or collaborator account has been granted the QcloudCamSubaccountsAuthorizeRoleFullAccess permission.

Authorizing Sub-User

In actual product use, the main accounts are usually collaborators or sub-users. Depending on the authorization requirements, different granular operational permissions can be granted to sub-users or collaborators through the following methods.
Authorization Plan
Applicable Scenario
Operation Step
Authorization based on preset permissions
Applicable to configuring sub-user management permissions of all instances.
Through the EMR Serverless HBase preset policy, quickly grant sub-users the QcloudEMRFullAccess permission, giving the sub-user management permissions for all EMR resources.
Operation-based authorization
Applicable to configuring partial operational permissions of all instances for specific sub-users.
Create a new CAM custom policy to grant sub-users partial operational permissions for the product. For details, see
General authorization based on tags
Applicable to configuring sub-user management permissions for instances of different ownership through tags.
1.Set instance tag: Add an ownership tag when creating the instance.
2.Set sub-user permissions: Create a new CAM custom policy to grant sub-users partial operational permissions for specific instances. For details, see Create a Custom Policy with Policy Syntax.




































































이전 주제: Dual-Active Deployment다음 주제: Creating an Instance

도움말 및 지원

문제 해결에 도움이 되었나요?

피드백