doc-exports/docs/mrs/umn/admin_guide_000147.html

<a name="admin_guide_000147"></a><a name="admin_guide_000147"></a>

<h1 class="topictitle1">Managing User Groups</h1>
<div id="body1529658735915"><div class="section" id="admin_guide_000147__section4888719"><h4 class="sectiontitle">Scenario</h4><p id="admin_guide_000147__p44289360"><span id="admin_guide_000147__text15946118176">MRS</span> Manager supports a maximum of 5000 user groups (including built-in user groups). You can create and manage different user groups based on service scenarios on <span id="admin_guide_000147__text139571232185113">MRS</span> Manager. A user group is bound to a role to obtain operation permissions. After a user is added to a user group, the user can obtain the operation permissions of the user group. A user group can be used to classify users and manage multiple users.</p>
</div>
<div class="section" id="admin_guide_000147__section43998472"><h4 class="sectiontitle">Prerequisites</h4><ul id="admin_guide_000147__ul19683111"><li id="admin_guide_000147__li42930272">You have learned service requirements and created roles required by service scenarios.</li><li id="admin_guide_000147__li50828134">You have logged in to <span id="admin_guide_000147__text1521512354519">MRS</span> Manager.</li></ul>
</div>
<div class="section" id="admin_guide_000147__section205453863818"><a name="admin_guide_000147__section205453863818"></a><a name="section205453863818"></a><h4 class="sectiontitle">Creating a User Group</h4><ol id="admin_guide_000147__ol9617010"><li id="admin_guide_000147__li19444226"><span>Choose <strong id="admin_guide_000147__b11741641155010">System</strong> &gt; <strong id="admin_guide_000147__b18151147145018">Permission</strong> &gt; <strong id="admin_guide_000147__b1259775020505">User Group</strong>.</span></li><li id="admin_guide_000147__li31478446"><span>Above the user group list, click <span class="parmname" id="admin_guide_000147__parmname39357757154438"><b>Create User Group</b></span>.</span></li><li id="admin_guide_000147__li14870565"><span>Set <span class="parmname" id="admin_guide_000147__parmname128007154458"><b>Group Name</b></span> and <span class="parmname" id="admin_guide_000147__parmname8802700154511"><b>Description</b></span>.</span><p><p id="admin_guide_000147__p48825260204020">The group name contains 1 to 64 characters, including case-insensitive letters, digits, underscores (_), hyphens (-), and spaces. It cannot be the same as an existing user group name in the system.</p>
</p></li><li id="admin_guide_000147__li66726223"><span>In the <strong id="admin_guide_000147__b1642710136539">Role</strong> area, click <strong id="admin_guide_000147__b18831161635316">Add</strong> to select a role and add it.</span><p><div class="note" id="admin_guide_000147__note47302913446"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="admin_guide_000147__ul1293412368313"><li id="admin_guide_000147__li199344366319">For components (except HDFS and Yarn) for which Ranger authorization has been enabled, the permissions of non-default roles on Manager do not take effect. You need to configure Ranger policies to assign permissions to user groups.</li><li id="admin_guide_000147__li49343361439">If the resource requests of HDFS and Yarn are beyond the Ranger policies, the ACL rules of the components still take effect.</li></ul>
</div></div>
</p></li><li id="admin_guide_000147__li45040597194640"><span>In the <strong id="admin_guide_000147__b24061538155316">User</strong> area, click <strong id="admin_guide_000147__b18606834185415">Add</strong> to select a user and add it.</span></li><li id="admin_guide_000147__li858943719554"><span>Click <span class="uicontrol" id="admin_guide_000147__uicontrol115901037155514"><b>OK</b></span>.</span><p><p id="admin_guide_000147__p0861123975517">The user group is created.</p>
</p></li></ol>
</div>
<div class="section" id="admin_guide_000147__section6770117204012"><h4 class="sectiontitle">Viewing User Group Information</h4><p id="admin_guide_000147__p208721713174010">By default, all user groups are displayed in the user group list. You can click the arrow on the left of a user group name to view details about the user group, including the user quantity, specific users, and bound roles of the user group.</p>
</div>
<div class="section" id="admin_guide_000147__section11987134143911"><h4 class="sectiontitle">Modifying Information About a User Group</h4><p id="admin_guide_000147__p9681928111510">Locate the row that contains the target user group, and click <strong id="admin_guide_000147__b85271954598">Modify</strong> to modify its information.</p>
</div>
<div class="section" id="admin_guide_000147__section14860161203916"><h4 class="sectiontitle">Exporting Information About a User Group</h4><p id="admin_guide_000147__p954210522034">Click <strong id="admin_guide_000147__b775034818112250">Export All</strong> to export all user group information at a time in <span class="parmvalue" id="admin_guide_000147__parmvalue1287125398112250"><b>TXT</b></span> or <span class="parmvalue" id="admin_guide_000147__parmvalue158776134112250"><b>CSV</b></span> format.</p>
<p id="admin_guide_000147__p6752835655">The exported user group information contains the user group name, description, user list, and role list.</p>
</div>
<div class="section" id="admin_guide_000147__section73271229143919"><h4 class="sectiontitle">Deleting a User Group</h4><p id="admin_guide_000147__p77511248385">Locate the row that contains the target user group, and click <strong id="admin_guide_000147__b85371053823">Delete</strong>. To delete multiple user groups in batches, select the target user groups and click <strong id="admin_guide_000147__b119191861130">Delete</strong> above the user group list. A user group that contains users cannot be deleted. To delete such a user group, delete all its users by modifying the user group first.</p>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="admin_guide_000135.html">Configuring Permissions</a></div>
</div>
</div>