GridGain Developers Hub

Authorization and Permissions

You need an authorization to access the secured GridGain clusters via Control Center.

When you attempt to initiate a permission-protected action on a secured GridGain cluster, you are prompted to enter the cluster-specific user name and password.

secured cluster auth

Control Center supports the following permissions.

Baseline Actions

All baseline topology actions require the ADMIN_OPS permission.

Binary Type Actions

The binary type actions that might affect the cluster state require the following permissions:

Action Permission

Update binary types

ADMIN_METADATA_OPS

Remove binary type

ADMIN_METADATA_OPS, TASK_EXECUTE

Cache Actions

The cache actions that might affect the cluster state require the following permissions:

Action Permission

Reset lost partitions

ADMIN_OPS

Clear cache

CACHE_REMOVE

Destroy cache

CACHE_DESTROY

Rebalance caches

ADMIN_CACHE

Load cache

ADMIN_OPS, TASK_EXECUTE

Enable cache statistics

ADMIN_CACHE

Disable cache statistics

ADMIN_CACHE

Cache DR Actions

All cache DR actions require the ADMIN_OPS permission.

Cluster Actions

The cluster actions require the following permissions:

Action Permission

Activate cluster

ADMIN_OPS

Deactivate cluster

ADMIN_OPS

Change cluster tag

ADMIN_OPS

Export cluster logs

ADMIN_OPS, TASK_EXECUTE

License Actions

The upload license action requires the ADMIN_OPS permission.

Code Deployment Actions

All code deployment actions require the ADMIN_OPS permission.

Compute Actions

The compute task actions that might affect the cluster state require the following permissions:

Action Permission

Cancel compute task

TASK_CANCEL

Change priority of compute task

ADMIN_OPS

Node Actions

The node actions that might affect the cluster state require the following permissions:

Action Permission

Perform garbage collection

ADMIN_OPS

Create thread dump

ADMIN_OPS

Query Actions

The query actions that might affect the cluster state require the following permissions:

Action Permission

Cancel query

KILL_QUERY

Kill query

KILL_QUERY

Execute SQL query

CACHE_READ, CACHE_CREATE, CACHE_PUT

Execute scan query

CACHE_READ

Show query history

GET_QUERY_VIEWS

Update configuration for running queries

ADMIN_OPS

Snapshot Actions

The snapshot actions require the following permissions:

Action Permission

Create snapshot

ADMIN_OPS

Delete snapshot

ADMIN_CACHE

Copy snapshot

ADMIN_CACHE

Move snapshot

ADMIN_CACHE

Check snapshot

ADMIN_OPS

View snapshot list

ADMIN_VIEW

Restore snapshot

ADMIN_CACHE

Recover to snapshot

ADMIN_VIEW, ADMIN_CACHE

Cancel snapshot operation

ADMIN_OPS

Snapshot Schedule Actions

The snapshot schedule actions require the following permissions:

Action Permission

View schedule list

ADMIN_VIEW

Create schedule

ADMIN_OPS

Delete schedule

ADMIN_OPS

Enable schedule

ADMIN_OPS

Disable schedule

ADMIN_OPS

Tracing Actions

The change tracing configuration action requires the TRACING_CONFIGURATION_UPDATE permission.