3.3. Controlling Access to luci

As of Red Hat Enterprise Linux 6.2, the root user or a user who has been granted luci administrator permissions on a system running luci can control access to the various luci components by setting permissions for the individual users on a system. To set the user permissions, log in to luci as root and click the Admin selection in the upper right corner of the luci screen. This brings up the USER PERMISSIONS page, showing a dropdown menu from which you can select a user.

After selecting a user, you can check whether to allow the following permissions for that user:

Luci Administrator: Grants the user the same permissions as the root user, with full permissions on all clusters and the ability to set or remove permissions on all other users except root, whose permissions cannot be restricted.
Can Create Clusters: Allows the user to create new clusters, as described in Section 3.4, “Creating a Cluster”.
Can Import Existing Clusters: Allows the user to add an existing cluster to the luci interface, as described in Section 4.1, “Adding an Existing Cluster to the luci Interface”.

For each cluster that has been created or imported to luci, you can set the following permissions for the indicated user:

Can View This Cluster: Allows the user to view the specified cluster.
Can Change the Cluster Configuration: Allows the user to modify the configuration for the specified cluster, with the exception of adding and removing cluster nodes.
Can Enable, Disable, Relocate, and Migrate Service Groups: Allows the user to manage high-availability services, as described in Section 4.4, “Managing High-Availability Services”.
Can Stop, Start, and Reboot Cluster Nodes: Allows the user to manage the individual nodes of a cluster, as described in Section 4.2, “Managing Cluster Nodes”.
Can Add and Delete Nodes: Allows the user to add and delete nodes from a cluster, as described in Section 3.4, “Creating a Cluster”.
Can Remove This Cluster from Luci: Allows the user to remove a cluster from the luci interface, as described in Section 4.3, “Starting, Stopping, Restarting, and Deleting Clusters”.

Click Submit for the permissions to take affect, or click Reset to return to the initial values.