The User Admin application lets a superuser add, delete, and manage Hue users and groups, and configure group permissions. Superusers can add users and groups individually, or import them from an LDAP directory. Group permissions define the Hue applications visible to group members when they log into Hue and the application features available to them.
Click the User Admin icon in the navigation bar at the top of the Hue browser page below your login name. The Hue Users page opens.
The User Admin application provides two levels of user privileges: superusers and users.
First name and Last name |
The user's first and last name. |
E-mail address |
The user's e-mail address. The e-mail address is used by the Job Designer and Beeswax applications to send users an e-mail message after certain actions have occurred. The Job Designer sends an e-mail message after a job has completed. Beeswax sends a message after a query has completed. If an e-mail address is not specified, the application will not attempt to email the user. |
Groups |
The groups to which the user belongs. By default, a user is assigned to the default group, which allows access to all applications. See Managing Application Permissions. |
Hue must be configured to use an external LDAP directory (OpenLDAP or Active Directory). See Hue Installation in CDH4 Installation.
Importing users from an LDAP directory does not import any password information. You must add passwords manually in order for a user to log in.
To add a user from an external LDAP directory:
Username |
The user name. |
Distinguished name |
Indicate that Hue should use a full distinguished name for the user. This imports the user's first and last name, username, and email, but does not store the user password. |
Create home directory |
Indicate that Hue should create a home directory for the user in HDFS. |
If the user already exists in the User Admin, the user information in User Admin is synced with what is currently in the LDAP directory.
You can sync the Hue user database with the current state of the LDAP directory using the Sync LDAP users/groups function. This updates the user and group information for the already imported users and groups. It does not import any new users or groups.
Superusers can add and delete groups, configure group permissions, and assign users to group memberships.
You can add groups, and delete the groups you've added. You can also import groups from an LDAP directory.
Name |
The group name. |
Distinguished name |
Indicate that Hue should use a full distinguished name for the group. |
Import new members |
Indicate that Hue should import the members of the group. |
Import new members from all subgroups |
Indicate that Hue should import the members of the subgroups. |
Create home directories |
Indicate that Hue should create home directories in HDFS for the imported members. |
Permissions for Hue applications are granted to groups, with users gaining permissions based on their group membership. Group permissions define the Hue applications visible to group members when they log into Hue and the application features available to them.