Limiting the ability to add more Administrators

1

Hello All,

First time caller, long time listener!

I have a question about configuring Dremio EE. Is there a way to disable a user assigned to the Administrator role, so that user cannot assign the Administrator role to another user?

I have this scenario and was wondering if there is something I can configure (dremio.conf,…).

Any help would be appreciated.

Fred Blue

2

Currently an Admin can do everything so their is no way to limit their abilities.

We recently added our initial RBAC support in 16.0 and have extracted several privileges that can be assigned instead of having to make users admins.

Our goal is to eventually have all privileges be piecemeal - if our current privileges are not sufficient, reaching out to an account manager with requirements would help us prioritize these.

Thanks, Doron