Lists the supported user roles and their associated permissions for Crosswork Data Gateway, while providing guidance for users to securely manage and update their own passphrases.
This section contains these topics:
Supported user roles
Crosswork Data Gateway supports two default user roles. Each role has specific permissions and responsibilities.
-
Administrator role:
-
Username:
dg-admin -
Description: This user is created by default when Crosswork Data Gateway is set up for the first time. The
Permissions:dg-adminuser has full administrative privileges, which include both read and write access.-
Starting and shutting down the Crosswork Data Gateway VM.
-
Registering applications within the system.
-
Applying authentication certificates.
-
Configuring server settings.
-
Performing kernel upgrades.
For other permissions, see Role-based permissions.
Note that the
dg-adminuser cannot be deleted. -
-
-
Operator role: The dg-oper user is also created by default during the initial VM startup. This user can review the health of the Crosswork Data Gateway, retrieve error logs, receive error notifications, and run connectivity tests between the Crosswork Data Gateway instance and the output destination.
-
Username:
dg-oper -
Description: This user is also created by default during the initial deployment of the Crosswork Data Gateway VM. The
dg-operuser has a more limited set of permissions, focusing on system monitoring and troubleshooting. -
Permissions:
-
Reviewing the health status of Crosswork Data Gateway.
-
Retrieving error logs.
-
Receiving error notifications.
-
Running connectivity tests between the Crosswork Data Gateway instance and its output destination.
For other permissions, see Role-based permissions.
-
-
Role-based permissions for administrators and operators
| Permissions |
Administrator |
Operator |
|---|---|---|
| Get Enrollment Package | ✓ |
✓ |
| Show system settings |
||
| vNIC Addresses NTP DNS Proxy UUID Syslog Certificates First Boot Provisioning Log Timezone Collector Service Ports |
✓ |
✓ |
| Change Current System Settings |
||
| Configure NTP Configure DNS Configure Control Proxy Configure Static Routes Configure Syslog Create new SSH keys Import Certificate Configure SB_Data vNIC MTU Configure Timezone Configure Password Requirements Configure Simultaneous Login Limits Configure Idle Timeout Configure auditd Configure Login Check Frequency Configure AWS IAM Role Configure Interface Address Configure Controller IP/FQDN |
✓ |
╳ |
| Vitals |
||
| Docker Containers Docker Images Controller Reachability NTP Reachability Route Table ARP Table Network Connections Disk Space Usage Linux services NTP Status System Uptime |
✓ |
✓ |
| Troubleshooting |
||
| Run Diagnostic Commands Run show-tech Remove All Non-Infra Containers and Reboot VM Reboot VM Re-enroll Data Gateway Remove Rotated Log Files Export auditd Logs Enable TAC Shell Access |
✓ ✓ ✓ ✓ ✓ ✓ ✓ |
✓ ✓ ╳ ╳ ✓ ✓ ╳ |
| Change Passphrase |
✓ |
✓ |
User authentication
-
Both the
dg-adminanddg-operaccounts are configured with credentials during the installation of Crosswork Data Gateway. -
User authentication is local to the system. Authentication occurs within the system rather than through an external identity provider.
Change the user passphrase
Both Administrator and Operator users can change their own passphrases, but they cannot change each other's passphrases.
To change your passphrase, use these steps:
Procedure
| 1. | From the Main Menu, select Change Passphrase and click OK. |
|
| 2. | Enter your current password, then press Enter. |
|
| 3. | Enter your new password and press Enter. To confirm, re-type your new password and press Enter. |