question Re: About "Delegate Admin" in Ranger in Archives of Support Questions (Read Only)

About "Delegate Admin" in Ranger

pminovic — Thu, 18 Feb 2016 09:06:46 GMT

About "Delegate admin" Ranger user guide says: When a policy is assigned to a user or a group of users those users become the delegated admin.The delegated admin can update, delete the policies. It can also create child policies based on the original policy (base policy). What exactly can be done? I'm assuming the delegated admin can only further reduce given permissions. Do we have any examples updating the policy and creating child policies.

Re: About "Delegate Admin" in Ranger

nsabharwal — Thu, 18 Feb 2016 11:59:58 GMT

@Predrag Minovic

See this...In my case , I have a user called demouser and I have created a policy called policy1 and its delegated policy. When I login with user demouser in ranger then I can see policy1 but when I remove delegated option from policy1 then demouser cant see it.

You can see the demo here

Re: About "Delegate Admin" in Ranger

nsabharwal — Sun, 18 Aug 2019 13:24:27 GMT

@Predrag Minovic It can do whatever the permissions you give to do. demouser can login and delegate other users

admin

demouser

Re: About "Delegate Admin" in Ranger

pminovic — Thu, 18 Feb 2016 12:13:43 GMT

Thanks @Neeraj Sabharwal, that's cool! And per specs. What else can the demouser do as the delegated admin, can he add more paths? And how about child policies, can you try to create one? Tnx.

Re: About "Delegate Admin" in Ranger

nsabharwal — Thu, 18 Feb 2016 19:02:31 GMT

@Predrag Minovic

demouser cannot add new policy for new paths but can add more paths under the main path.

Re: About "Delegate Admin" in Ranger

nsabharwal — Fri, 19 Feb 2016 19:45:38 GMT

@Predrag Minovic Help me to close the thread by accepting the best answer if answer was helpful.

Re: About "Delegate Admin" in Ranger

garunkumar85 — Sun, 03 Apr 2016 09:17:58 GMT

@neeraj sabharwal

am not able to access demo video 😞

Re: About "Delegate Admin" in Ranger

pminovic — Sun, 03 Apr 2016 13:05:08 GMT

There is no video, it's an animated gif, located here http://i.giphy.com/l4Ki1Ng3uxdTnUTra.gif

Re: About "Delegate Admin" in Ranger

inderjeet26 — Sat, 26 May 2018 01:16:19 GMT

Hello, From what version of Ranger this delegate admin feature is supported? This is a cool feature for multi-level provisioning powers