(v24) Enable User Delegation

Enable User Delegation

This applies to: Visual Data Discovery

You can use user delegation to run queries on behalf of users using a single set of credentials for a number of connectors. This allows you to share a single connection configuration among all users. User delegation can be established on a per-user or a per-group basis.

User delegation is currently supported by the following connectors: Apache Drill, Cloudera Impala, Cloudera Search, and Hive. The Oracle connector supports user delegation only via user credential pass-through.

Note: Symphony administrators enable and apply user delegation to the data connection definition for a data source.

Enable user delegation

1. Log in as a system admin.

2. Select Tools > Security from the main menu. The security tabs display.

   

3. Select the LDAP Settings tab. The LDAP Settings tab has five sections: General Settings, LDAP Server, User Provisioning, Mappings, and Mappings to Custom User Attributes.

   Note: If the LDAP tab cannot be selected, verify that the LDAP security service is enabled. See Use Lightweight Directory Access Protocol (LDAP) With ComposerSymphony.

4. In the Mapping to Custom User Attributes section, select Add Custom User Attribute.

5. Type any meaningful name for the custom attribute name.

6. Match the new attribute to any LDAP attribute (for example, cn, sAMAccountName, name). This should be provided by an Impala administrator. The only requirement is that this attribute match the configuration in Sentry.

7. Select Save to save the attribute.

   The custom user attribute is referenced by its name, prefaced by the word User. For example, if your custom user attribute is named XXXUserName, you would reference it as User.XXXUserName. This reference name is shown in the Usage column.

8. Select Connectors on the supervisor menu. The Manage Connector Services page appears. This page has two tables: one for Connector Servers and one for Connectors.

9. Scroll down to the Connectors table and select the appropriate connector from the list. The connector settings page displays.

   

10. Scroll down to the Connector Parameters and verify that the checkbox in the User Attribute column for the DO_AS_USER parameter is selected. This ensures that the DO_AS_USER parameter is visible and can be set in your Impala connection.

11. Select Save.

To apply user delegation to a data source connection definition, see Apply User Delegation to a Connection.