question Re: Additional ranger Keyadmins in Archives of Support Questions (Read Only)

Additional ranger Keyadmins

sajesh_purayil — Mon, 10 Dec 2018 15:40:19 GMT

We are managing the Ranger KMS using kayadmin user.

I can add users and assign admin role from ranger admin console. But could not find user management option after login to keyadmin user profile.

How can I create new users and add them as keyadmin for managing keys ?

Thanks,

Sajesh

Re: Additional ranger Keyadmins

sampathkumar_ma — Tue, 11 Dec 2018 01:16:27 GMT

Hi @Sajesh PP,

To create KMS admins, do the following:
1. Since only admin role can create users, first login to Ranger UI as an admin.
2. Create multiple new users from Ranger webUI and keep these users as ADMIN role
3. Go to Settings -> Permissions -> Edit 'Key Manager' permission & add newly created user to 'Key Manager' module -> Save & Logout
4. Login as new user and you can use 'Encryption' tab for creating and managing the keys.

Hope this helps!

Please login and accept the answer if you find this answer helpful. Thanks

Re: Additional ranger Keyadmins

sajesh_purayil — Tue, 11 Dec 2018 14:26:00 GMT

I had followed the above steps.

After login to new user account i can go to Encryption tab.But when I select my Service name from "Select service" option it says "User:<user> not allowed to do 'GET_KEYS" and i cannot see any of my keys listed

Re: Additional ranger Keyadmins

sampathkumar_ma — Sat, 17 Aug 2019 23:00:22 GMT

Hi @Sajesh PP,

Could you please try to add new user to KMS policy and grant the permissions.

Login as keyadmin -> Access Manager -> Click the KMS service -> Edit "all-keyname" policy -> add newly created user in select user section.

Hope this helps!!

Please login and accept the answer if you find this answer helpful. Thanks

Re: Additional ranger Keyadmins

sampathkumar_ma — Thu, 13 Dec 2018 18:29:01 GMT

@Sajesh PP Are you able to list the keys using above method?If so, please login and accept the answer.