Skip to main content Skip to complementary content

Configuring user impersonation for microservice data services/Routes

Procedure

  1. Open the <RemoteEngineInstallationDirectory>/etc/org.talend.ipaas.rt.dsrunner.cfg file.
  2. Specify the Java path to be used by the impersonated user in ms.custom.jre.path. By default, the system JRE path is used.
    This setting ensures that the impersonated user has access to the Java installation used by the engine.
  3. Edit the ms.execution.run.as.allow.list value and add all the users you need.
    The following table presents how different values of this parameter impact task run with impersonation
    Parameter value example Impersonation user example Task run Note
    anybody No impersonated user is used Accepted N/A
    anybody Jim Accepted All users are allowed
    * No impersonated user is used Rejected You must specify a user
    * Jim Accepted All users are allowed
    Jim,Jules No impersonated user is used Rejected You must specify a user recognized by this parameter
    Jim,Jules Jim Accepted Jim is recognized by this parameter
    Ju* Jules Accepted Jules is recognized by this parameter because Jules matches Ju*

    The value of this parameter is case-sensitive.

    Information noteNote:
    • This parameter is required if you need to use impersonation to run tasks.
    • Spaces and commas are valid separators for user name values in this file.
  4. Edit ms.execution.run.as.user.validation.regex to ensure that undesired instructions are not inserted in the user name variable. Default value is set to ^[a-z][-a-z0-9]*\$.

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – let us know how we can improve!

Leave your feedback here