You can translate the question and the replies:

About the access of rules in Resource Manager

Hi team, We have requirment: we have a denodo role group (such as the same is role_aaa), we want to define a rule that only want to apply to this role_aaa, which let the query sent from this role group, its runtime cannot exceeds 5 minutes. what I set in the condition is: (roles).value = 'role_aaa', but I did not see the rule applied for this group. If I change the condition as: admin_users = 'false' I see it works, which means admin _users query can exceed 5 mins. Is my configuration of [ (roles).value = 'role_aaa' ] incorrect? thanks.
user
12-01-2021 05:22:36 -0500
code

3 Answers

Hi, I've done some tests and I was able to make it work as you have mentioned. The condition: (roles).value = ‘role_aaa’ will apply the plan to the users that belong to this role. Your configuration is correct. I'd suggest you review if there are other rules or plans that can interfere with this one. Hope this helps!
Denodo Team
12-01-2021 07:13:51 -0500
code
Thanks for your reply.I have tried again. below are my steps. And it work. 1, create a user 'user_a' and create a role group 'role_aaa' 2. assign user 'user_a' to group 'role_aaa' 3. create a plan and rule let query from 'role_aaa' cannot run exceed 30 seconds However our scenario is we have a LDAP role, the user in this LDAP role is not directly adeed from Denodo. And we import this role in to Denodo. We create a rule, want to let the query from any memebr of this LDAP role not exceed 5 mins. We found the rule works for some member in this role group, but not work for the other members in this role group. However, our
user
12-01-2021 21:52:24 -0500
Hi, If this rule is working for some users and not for another one it means the rule is well configured. I'd review the user configuration in LDAP to check that the user belongs to the group (imported role) you are assigning the rule. Hope this helps!
Denodo Team
20-01-2021 08:29:40 -0500
code
You must sign in to add an answer. If you do not have an account, you can register here