Product DocumentationAppearance
User Accounts
This section describes the types of user accounts that exist on the Yellowbrick appliance, their usage, and the default accounts of each type that are created with a new installation.
User accounts fall into two main categories: appliance accounts and database accounts. Appliance accounts monitor and manage the appliance and hardware from the manager node command line interface; these accounts are not database users. Database user accounts exist only in the database and are not appliance users.
An initial appliance installation creates two login user accounts for administration. Their passwords can be changed but otherwise they are not configurable.
| Usage | Default Username/Password |
|---|---|
| Appliance administrator superuser | ybdadmin/YBDmgmt |
| Database administrator superuser | yellowbrick/yellowbrick |
Other appliance and database internal service accounts are created that the administrators should not modify. They are discussed in more detail later in this section.
Appliance User Accounts
Appliance users may execute appliance management commands within the Yellowbrick command line interface, ybcli, to perform actions such as starting the database and monitoring the appliance status. Appliance admins are also able to perform appliance configuration commands on the appliance hardware and users. See config. Additionally no-login accounts exist for Yellowbrick services.
| Type | Username | Description |
|---|---|---|
| Administrator | ybdadmin | - Appliance administrator account for the Yellowbrick appliance. - Used for all aspects of appliance configuration and management. - Only account with permission to create other appliance users. - Also exists as a database no-login superuser. |
| User | Administrator-created | - Created by the administrator, ybdadmin.- Users can be created with or without administrator privileges. |
| Service | ybddcs, ybdsmc, and so on | - No-login accounts that own Yellowbrick services; System Management Console (SMC), phonehome Data Collection Services (DCS), and so on. |
Database User Accounts
Database administration (superuser) and service accounts are created as part of the appliance initial installation and should not be modified except for changing the password of the yellowbrick user.
| Type | Username | Description |
|---|---|---|
| Administrator | yellowbrick | - Database administrator (superuser) with all privileges across all the databases in the Yellowbrick appliance. - Used to create additional superuser and end-user accounts, grant permissions, access all system catalog tables, and SMC. - Can use SQL-based administration tools and commands (such as ybsql).- Can use Java-based bulk operations including backup and restore operations ( ybbackup, ybrestore), and load and unload operations (ybload, ybunload). |
| User | Administrator-created | - No default end-users or additional administrators are created during installation. - Database end-user accounts define an individual's access rights. See Managing Database Users. - You can create database users with SQL or in the SMC . |
| Roles | Administrator-created | - The same applies to "roles" (similar to groups), which are users without the login attribute. |
| Service | sys_ybd_* | - Several no-login internal superuser accounts used by Yellowbrick services. - These services run background operations, such as flushing and analyzing tables. |
| SMC Roles | sys_ybd_smc, sys_ybd_smc_admin, sys_ybd_smc_manager, sys_ybd_smc_reporter, ys_ybd_smc_viewer. | - The SMC has the sys_ybd_smc superuser and four non-login, non-superuser accounts.- You can create database users in the SMC with "console access" privileges at these four levels. |
Parent topic:System Management