User access

Lenses provides data and application centric security via permissions on groups of users.

LDAP, Active Directory and Single-Sign-On provide user authentication and group management, while Kerberos provides only user authentication, but no group management.

AuthenticationUsersGroupsPermissions
LDAPLenses.io logo small
SSOLenses.io logo small
KerberosLenses.io logo smallLenses.io logo small
BasicLenses.io logo smallLenses.io logo smallLenses.io logo smallLenses.io logo small

Authentication

Learn more about different authentication providers:

When working with LDAP or Active Directory, user and group management is done in LDAP.

Lenses provides fine-grained role-based access (RBAC) for your existing groups of users over data and applications. Create a group in Lenses with the same name (case-sensitive) as in LDAP/AD:

Lenses.io add an LDAP group to your DataOps platform

And set permissions. For setup and complex LDAP cases see here.

When using an SSO solution such as Azure AD, Okta, OneLogin or an open source like KeyCloak user and group management is done in the Identity Provider.

Lenses provides fine-grained role-based access (RBAC) for your existing groups of users over data and applications. Create a group in Lenses with the same name (case-sensitive) as in yous SSO group.

SSO with SAML2.0 for DataOps

And set permissions. See how to configure SSO.

When using Kerberos, the authentication of users is happening via SPNEGO.

1. First create a group of users

Kerberos Kafka Lenses.io security

2. Then add users to groups

Add new Kerberos users to Lenses.io

And set permissions. See how to configure Kerberos.

With Basic Authentication, create groups of users and add users to those groups. Authentication and authorization are fully managed, and users can change their passwords.

Learn more about permissions and create groups and add users.