Skip to main content

Configure ACL

Create the user first, then grant it an ACL. For why both steps are needed and what each operation permits, see Overview ACL.

Create a Kafka user​

  1. Log in to FPT Cloud Console and select Database Platform → Data Streaming.

  2. Click the Kafka database ID, open the Configure Params tab, then the Kafka ACL sub-tab.

    Kafka ACL sub-tab showing the user list

    The User List shows each user's Username, its masked Password, and its SASL mechanism.

  3. In the User List section, click the Add user plus icon.

    Create new user dialog with username, password, and SASL mechanism

  4. Fill in the fields:

    • Username: the Kafka principal. Maximum 50 characters, excluding / \ : * ? " < > | [ ].
    • Password: 12 to 20 characters, with at least one lowercase letter, one uppercase letter, one number, and one special character. No spaces, and not these characters: $ \ / [ ] ' " : ; + - ^ < > ( ) | `
    • SASL mechanism: PLAIN, SCRAM-SHA256, or SCRAM-SHA512.

  5. Click Create.

warning

Creating or updating a user with SASL/PLAIN restarts the Kafka database, which disrupts producers and consumers. Prefer a SCRAM mechanism, or schedule PLAIN changes for off-peak hours.

The user is now available for Kafka client configuration, Kafka Connect, and ACL assignment.

Update or delete a user​

In the User List, click Update Password for a user to change its password, or Delete to remove it. Confirm in the dialog.

Grant an ACL​

  1. In the User List, select Grant ACL for the user.

    Grant ACL dialog with resource type, prefix, and operations

  2. Fill in the fields:

    • Username: the selected user, shown read-only.
    • Resource Type: Topic for topic access, or Consumer group for consumer group access.
    • Topic prefix / Group prefix: the resource prefix the permission covers. Enter All to cover every topic or every consumer group.
    • Operations: the permitted operations, which differ by resource type. See Overview ACL for what each one grants.

  3. Click Save.

The ACL takes effect immediately, with no restart. A user can hold multiple ACLs.

Next steps​