User Accounts

This section describes the types of user accounts that exist on the Yellowbrick appliance, their usage, and the default accounts of each type that are created with a new installation.

User accounts fall into two main categories: appliance accounts and database accounts. Appliance accounts monitor and manage the appliance and hardware from the manager node command line interface; these accounts are not database users. Database user accounts exist only in the database and are not appliance users.

An initial appliance installation creates two login user accounts for administration. Their passwords can be changed but otherwise they are not configurable.

Table 1. Default Appliance User Accounts
Usage Default Username/Password
Appliance administrator superuser ybdadmin/YBDmgmt
Database administrator superuser yellowbrick/yellowbrick

Other appliance and database internal service accounts are created that the administrators should not modify. They are discussed in more detail later in this section.

Appliance User Accounts

Appliance users may execute appliance management commands within the Yellowbrick command line interface, ybcli, to perform actions such as starting the database and monitoring the appliance status. Appliance admins are also able to perform appliance configuration commands on the appliance hardware and users. See config. Additionally no-login accounts exist for Yellowbrick services.
Table 2. Appliance User Account Types and Defaults
Type Username Description
Administrator ybdadmin
  • Appliance administrator account for the Yellowbrick appliance.
  • Used for all aspects of appliance configuration and management.
  • Only account with permission to create other appliance users.
  • Also exists as a database no-login superuser.
User Administrator-created
  • Created by the administrator, ybdadmin.
  • Users can be created with or without administrator privileges.
Service ybddcs, ybdsmc, and so on
  • No-login accounts that own Yellowbrick services; System Management Console (SMC), phonehome Data Collection Services (DCS), and so on.

Database User Accounts

Database administration (superuser) and service accounts are created as part of the appliance initial installation and should not be modified except for changing the password of the yellowbrick user.

Table 3. Database User Account Types and Defaults
Type Username Description
Administrator yellowbrick
  • Database administrator (superuser) with all privileges across all the databases in the Yellowbrick appliance.
  • Used to create additional superuser and end-user accounts, grant permissions, access all system catalog tables, and SMC.
  • Can use SQL-based administration tools and commands (such as ybsql).
  • Can use Java-based bulk operations including backup and restore operations (ybbackup, ybrestore), and load and unload operations (ybload, ybunload).
User Administrator-created
  • No default end-users or additional administrators are created during installation.
  • Database end-user accounts define an individual's access rights. See Managing Database Users.
  • You can create database users with SQL or in the SMC .
Roles Administrator-created
  • The same applies to "roles" (similar to groups), which are users without the login attribute.
Service sys_ybd_*
  • Several no-login internal superuser accounts used by Yellowbrick services.
  • These services run background operations, such as flushing and analyzing tables.
SMC Roles sys_ybd_smc, sys_ybd_smc_admin, sys_ybd_smc_manager, sys_ybd_smc_reporter, ys_ybd_smc_viewer.
  • The SMC has the sys_ybd_smc superuser and four non-login, non-superuser accounts.
  • You can create database users in the SMC with "console access" privileges at these four levels.