...

1. Create the RED Scheduler user role and provide grants.
   

   Code Block
   language sql
   CREATE ROLE redscheduler_role NOLOGIN ADMIN postgres; GRANT USAGE ON SCHEMA red TO redscheduler_role; GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA red TO redscheduler_role; GRANT EXECUTE ON ALL PROCEDURES IN SCHEMA red TO redscheduler_role;

   We can potentially grant "INSERT, UPDATE, DELETE" to only the ws_wrk tables here, but we still need select on the rest. 
   

   Code Block
   language sql
   GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA red TO redscheduler_role;

   Grant redscheduler_role select access to the redadmin schema 
   

   Code Block
   language sql
   GRANT USAGE ON SCHEMA redadmin TO redscheduler_role; GRANT SELECT ON ALL TABLES IN SCHEMA redadmin TO redscheduler_role;

2. Create the RED scheduler user and grant the RED Scheduler role
   

   Code Block
   language sql
   CREATE USER redscheduler_user WITH PASSWORD 'redscheduler_pass'; GRANT redscheduler_role to redscheduler_user;

3. [OPTIONALLY] Optionally, create the RED Scheduler Profile Role and User, or just use the redadmin_user for Profile maintenance 
   

   Code Block
   language sql
   CREATE ROLE redschedulerprofile_role NOLOGIN ADMIN postgres;

   RED Grant 'red' schema permissions
    -- You must run these GRANT's after connecting to the repo database, in psql run: '\c redrepo_db' to connect to the repo db
   GRANT USAGE ON SCHEMA red TO redschedulerprofile_role;
   GRANT SELECT ON ALL TABLES IN SCHEMA red TO redschedulerprofile_role;
     -- RED 'redadmin' schema permissions
   GRANT USAGE ON SCHEMA redadmin TO redschedulerprofile_role;
   GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA redadmin TO redschedulerprofile_role;
     -- Create a RED profile admin user and grant the user role
   CREATE USER redschedulerprofile_user WITH PASSWORD 'red_pass';
   GRANT redschedulerprofile_role to redschedulerprofile_user;.
   

   Code Block
   language sql

...

...

1. GRANT

...

...

1. USAGE

...

...

1. ON

...

1. SCHEMA red

...

1. TO

...

1. redschedulerprofile_role

...

1. ;

...

1. GRANT

...

...

1. SELECT ON ALL TABLES IN SCHEMA red TO redschedulerprofile_role;

...

1. Grant 'redadmin'

...

1. schema

...

1. permissions
   

   Code Block
   language sql
   GRANT USAGE ON SCHEMA redadmin TO redschedulerprofile_role; GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA redadmin TO redschedulerprofile_role;

...

1. Create a RED profile admin user and grant the user role
   

   Code Block
   language sql
   CREATE USER redschedulerprofile_user WITH PASSWORD 'red_pass'; GRANT redschedulerprofile_role to redschedulerprofile_user;

...

Create

...

an Azkaban User role and user in PostgreSQL

...

...

 This section assumes you have already created the Azkaban Metadata using the admin user.

...

1. Create the Azkaban metadata user role and provide grants to the Azkaban metadata objects in schema 'white'

   Code Block
   language sql

1. CREATE ROLE azkabanmeta_role NOLOGIN ADMIN postgres;

...

1. GRANT USAGE ON SCHEMA white TO azkabanmeta_role; GRANT USAGE ON ALL SEQUENCES IN SCHEMA white TO azkabanmeta_role; GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA white TO azkabanmeta_role; GRANT EXECUTE ON ALL PROCEDURES IN SCHEMA white TO azkabanmeta_role; GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA white TO azkabanmeta_role;

...

2. Create an Azkaban meta user and grant the user role

   Code Block
   language sql
   CREATE USER azkabanmeta_user

Examples

...

...

1. WITH PASSWORD 'azkabanmeta_pass'; GRANT azkabanmeta_role to azkabanmeta_user;

...

Adding Azkaban Users

If you require additional users for the Azkaban dashboard or API, other than the default users, you can add them following this process:

...

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<azkaban-users>
  <role name="admin" permissions="ADMIN"/>
  <role name="read" permissions="READ"/>
  <role name="executor" permissions="EXECUTE"/>
  <user username="admin" password="admin" roles="admin"/>
  <user username="readonly" password="readonly" roles="read"/>
  <user username="executor" password="executor" roles="executor,read"/>
</azkaban-users><azkaban-users/>

The possible role permissions are the following:

...