Users and role-based access control

User access control overview
IBM Spectrum Symphony implements a role-based model for user access control. With this type of security model, permissions are assigned to roles, and the roles are assigned to users. An extensive list of permissions is available that allows an administrator to fine tune the security requirements for each user.
User and role relationships
A role is a group of permissions. Roles can be assigned to any user or user group and any user or user group can have more than one role.
User permissions
User accounts
The cluster uses a number of accounts to run properly.
User roles
You can use the built-in roles or create your own roles that you can assign to users to customize authorization. For example, you can customize access to the cluster management console to meet the security requirements of any site.
User and role relationships
You can assign roles to users or user groups.
Best practice: Prevent the cluster administrator from submitting MapReduce workload
As a best practice for role-based access control, you can prevent the cluster administrator from submitting MapReduce workload using the cluster management console.

Parent topic: Management and usage