In LindormTable, each user starts with no permissions. Use the cluster management system to create users, set passwords, and control access to data at the global, namespace, or table level.
Prerequisites
Before you begin, ensure that you have:
-
Logged on to the cluster management system of your Lindorm instance. For more information, see Log on to the cluster management system
Create a user
-
In the left navigation pane, choose Data Manager > User Manager.
-
Click + Add user.
-
In the Add user dialog box, enter a Username and Password.
-
Click OK.
After you create a user, the password cannot be viewed in the system. If you forget the password, you must reset it using Change password. New users have no permissions by default — grant permissions after creation.
Delete a user
-
In the user list, find the user and click Delete in the Operation column.
-
Click OK.
Change a password
-
Click Change password in the Operation column for the user.
-
In the Change password dialog box, enter a New password.
-
Click OK.
Permission management
Permission levels
Lindorm defines three permission levels. Permissions flow downward — a higher level automatically covers all resources at lower levels.
| Level | Scope |
|---|---|
| Global | All databases and tables in the cluster |
| Database (Namespace) | All tables in the specified database, including tables created after the permission is granted |
| Table | The specified table only |
Example: A user with global read and write permissions can read and write all wide tables in every database in the cluster. A user with read and write permissions on Database 1 can read and write all tables in Database 1 — including any tables added to Database 1 later.
Permission types
| Permission | Operations covered | Syntax |
|---|---|---|
| WRITE | Write data to tables | PUT, BATCH, DELETE, INCREMENT, APPEND, CHECKANDMUTATE |
| READ | Read data from tables; read table descriptor and namespace information | GET, SCAN, EXIST, GETTABLEDESCRIPTOR, LISTTABLES, LISTNAMESPACEDESCRIPTORS |
| ADMIN | Data Definition Language (DDL) operations, excluding table deletion; namespace DDL operations | CREATETABLE, ENABLETABLE, DISABLETABLE, CREATENAMESPACE |
| TRASH | Delete tables and clear table data | TRUNCATETABLE, DELETETABLE |
| SYSTEM | Operations and maintenance (O&M) operations; data migration and synchronization via LTS | COMPACT, FLUSH |
Grant and revoke permissions
-
In the Operation column for the user, click More.

-
From the drop-down list, select Grant permissions or Revoke permissions.
-
Grant permissions: Select global, namespace, or table level.
-
Revoke permissions: Select global, namespace, or table level.
-
-
In the dialog box, select or deselect the permissions and related information.
-
Click OK.