[Best Practices] User Management

[tnk-dev]

Hey all,
since I am very new to Kyuubi, can you please point me to best practises how to set up user management?

Our vision as a data team:

• Data is stored as Delta in S3
• We want users to query our delta lake from tools like DBeaver with SQL
• Users should only be able to query selected/specific schemas/tables (SQL Grant?)

Questions therefore:
where and how do we create users and passwords?
can you create user groups with permissions?

[pan3793]

where and how do we create users and passwords?

LDAP may be a good choice.

Users should only be able to query selected/specific schemas/tables (SQL Grant?)

I hope the following link helps you.

https://kyuubi.readthedocs.io/en/master/security/authorization/spark/index.html

#4403

[tnk-dev]

[pan3793]

Sorry, the guide is in-progress, it should be straightforward if you have a basic idea about LDAP, please search the configuration page using the keyword "LDAP".