Skip to main content
AndreDre1
AndreDre1
Bronze ⭐️⭐️⭐️
March 22, 2022
Solved

No show Users and Policies in Global Menu

Hi..

I don't see the Users and Policies items in the Global Menu

Google Chrome ver99

Apache NiFi 1.15.3

 

AndreDre1_1-1647966818005.png

 

araujo
araujoAnswer
Platinum ⭐️⭐️⭐️
March 23, 2022

Hi @AndreDre1 ,

 

You probably have a default NiFi configuration, which uses the single-user-authorizer. This authorizer doesn't have a Users menu in the UI. To see the Users menu you need to switch to another authorizer.

 

For example, if you have a brand new installation of NiFi with the default configuration, follow the steps below:

 

  1. Edit the conf/nifi.properties file and update the following property:
    nifi.security.user.authorizer=managed-authorizer​
  2. Add the name of your initial admin in the following two places in conf/authorizers.xml:
    ...
    <userGroupProvider>
      <identifier>file-user-group-provider</identifier>
      <class>org.apache.nifi.authorization.FileUserGroupProvider</class>
      <property name="Users File">./conf/users.xml</property>
      <property name="Legacy Authorized Users File"></property>
      <property name="Initial User Identity 1">ADMIN_USERNAME_HERE</property>
    </userGroupProvider>
    ...
    <accessPolicyProvider>
      <identifier>file-access-policy-provider</identifier>
      <class>org.apache.nifi.authorization.FileAccessPolicyProvider</class>
      <property name="User Group Provider">file-user-group-provider</property>
      <property name="Authorizations File">./conf/authorizations.xml</property>
      <property name="Initial Admin Identity">ADMIN_USERNAME_HERE</property>
      <property name="Legacy Authorized Users File"></property>
      <property name="Node Identity 1"></property>
      <property name="Node Group"></property>
      </accessPolicyProvider>
    ...​
  3. Stop NiFi:
    ./bin/nifi.sh stop​
  4. Remove users.xml and authorizations.xml:
    rm conf/users.xml conf/authorizations.xml​
  5. Start NiFi:
    ./bin/nifi.sh start​
  6. After you login to NiFi you should now be able to see the Users menu:

araujo_0-1648029530077.png

 

Cheers,

André

--
Was your question answered? Please take some time to click on "Accept as Solution" below this post.
If you find a reply useful, say thanks by clicking on the thumbs up button.

-- Was your question answered? Please take some time to click on "Accept as Solution" below this post. If you find a reply useful, say thanks by clicking on the thumbs up button.
View in thread

8 replies

araujo
Platinum ⭐️⭐️⭐️
araujoAnswer
Platinum ⭐️⭐️⭐️
March 23, 2022

Hi @AndreDre1 ,

 

You probably have a default NiFi configuration, which uses the single-user-authorizer. This authorizer doesn't have a Users menu in the UI. To see the Users menu you need to switch to another authorizer.

 

For example, if you have a brand new installation of NiFi with the default configuration, follow the steps below:

 

  1. Edit the conf/nifi.properties file and update the following property:
    nifi.security.user.authorizer=managed-authorizer​
  2. Add the name of your initial admin in the following two places in conf/authorizers.xml:
    ...
    <userGroupProvider>
      <identifier>file-user-group-provider</identifier>
      <class>org.apache.nifi.authorization.FileUserGroupProvider</class>
      <property name="Users File">./conf/users.xml</property>
      <property name="Legacy Authorized Users File"></property>
      <property name="Initial User Identity 1">ADMIN_USERNAME_HERE</property>
    </userGroupProvider>
    ...
    <accessPolicyProvider>
      <identifier>file-access-policy-provider</identifier>
      <class>org.apache.nifi.authorization.FileAccessPolicyProvider</class>
      <property name="User Group Provider">file-user-group-provider</property>
      <property name="Authorizations File">./conf/authorizations.xml</property>
      <property name="Initial Admin Identity">ADMIN_USERNAME_HERE</property>
      <property name="Legacy Authorized Users File"></property>
      <property name="Node Identity 1"></property>
      <property name="Node Group"></property>
      </accessPolicyProvider>
    ...​
  3. Stop NiFi:
    ./bin/nifi.sh stop​
  4. Remove users.xml and authorizations.xml:
    rm conf/users.xml conf/authorizations.xml​
  5. Start NiFi:
    ./bin/nifi.sh start​
  6. After you login to NiFi you should now be able to see the Users menu:

araujo_0-1648029530077.png

 

Cheers,

André

--
Was your question answered? Please take some time to click on "Accept as Solution" below this post.
If you find a reply useful, say thanks by clicking on the thumbs up button.

Translate
-- Was your question answered? Please take some time to click on "Accept as Solution" below this post. If you find a reply useful, say thanks by clicking on the thumbs up button.
    roman_v
    roman_v
    Silver ⭐️
    April 15, 2023

    Thank you very much @araujo !!!👏

    Translate
    araujo
    Platinum ⭐️⭐️⭐️
    araujo
    Platinum ⭐️⭐️⭐️
    March 25, 2022

    @AndreDre1 , did the above answer your question?

     

    André

    --
    Was your question answered? Please take some time to click on "Accept as Solution" below this post.
    If you find a reply useful, say thanks by clicking on the thumbs up button.

    Translate
    -- Was your question answered? Please take some time to click on "Accept as Solution" below this post. If you find a reply useful, say thanks by clicking on the thumbs up button.
    Manika
    Manika
    Silver ⭐️
    September 26, 2022

    Hi @araujo  this link was really useful . But where can i get the password for newly created users. Without password how can new users access it . I am not able to find any documentation for that. i have checked in all the files as well and couldn't find any passwords

    Translate
    MattWho
    Titanium ⭐️⭐️⭐️
    MattWho
    Titanium ⭐️⭐️⭐️
    April 17, 2023

    @Manika 

    The single-user-provider used by NiFi out of the box does not support multiple users.  It simply sets up a single user to access the secured NiFi suing the out of the box NiFi setup.  Only the very first time NiFi is launched with this setup will the generated username and password be output in the nifi-app.log.  You can use the following command to change that username and password:

    $ ./bin/nifi.sh set-single-user-credentials <username> <password>

    This single user username and password has full access to everything, so NiFi does not expose "policies" as setting up additional users is not possible.

     

    NiFi provides no other provider for local users.  NiFi historically has left user management as an external dependency.  In order tp support multiple users with and various level of authorization, you will need to switch to using a different authorizer and authentication method.

    Switching to another authentication method will require you establish an external means for user authentication.  NiFi has numerous supported methods (User certificate, LDAP, Kerberos, etc.)
    https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#user_authentication

    Once you have selected the method you will use to authenticate your users that is not the "single-user-provider", you need to change your authorizer from "single-user-authorizer" to "standard-managed-authorizer":
    https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#standardmanagedauthorizer

     

    If you found that any of the provided solution(s) assisted you with your query, please take a moment to login and click Accept as Solution below each response that helped.


    Thank you,

    Matt

    Translate
    AlokKumar
    AlokKumar
    Gold ⭐️
    August 10, 2025

    Hi @MattWho Is there any support for OIDC now?

    Translate
    Terms & ConditionsAccessibility statement