FGA update (#3513)

* Removed optional, added coarse permission req

* added admin verbiage

* refined language

* Update content/enterprise_influxdb/v1.9/guides/fine-grained-authorization.md

Co-authored-by: kelseiv <47797004+kelseiv@users.noreply.github.com>

* reworded step 3

* update format, remove note

* clarified wording

* clarified wording

Co-authored-by: kelseiv <47797004+kelseiv@users.noreply.github.com>
Co-authored-by: Kelly <kelly@influxdata.com>
pull/3530/head^2
lwandzura 2021-12-28 12:03:37 -06:00 committed by GitHub
parent cd824beb58
commit e7c8b9218a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 17 additions and 3 deletions

View File

@ -48,14 +48,28 @@ In a typical cluster configuration, the HTTP ports for data nodes
You may need to work with your network administrator to gain access to the meta node HTTP ports.
{{% /note %}}
4. _(Optional)_ [Create roles](#manage-roles).
Roles let you grant permissions to groups of users assigned to each role.
4. Create users. Do the following:
1. As Administrator, create users and grant users all permissions. The example below grants users `east` and `west` all permissions on the `datacenters` database.
```sql
CREATE DATABASE datacenters
CREATE USER east WITH PASSWORD 'east'
GRANT ALL ON datacenters TO east
CREATE USER west WITH PASSWORD 'west'
GRANT ALL ON datacenters TO west
```
2. Add fine-grained permissions to users as needed.
5. [Create roles](#manage-roles) to grant permissions to users assigned to a role.
{{% note %}}
For an overview of how users and roles work in InfluxDB Enterprise, see [InfluxDB Enterprise users](/enterprise_influxdb/v1.9/features/users/).
{{% /note %}}
5. [Set up restrictions](#manage-restrictions).
6. [Set up restrictions](#manage-restrictions).
Restrictions apply to all non-admin users.
{{% note %}}