How to set a user as an admin user

You can use Magda acs-cmd command line utility to set your account as an Admin. Alternatively, if you already have a user with admin access, you can login and go to the “Admin / User Accounts” section to set / unset a user as an admin.

Installation

Please refer to acs-cmd utility NPM page for installation instructions.

Usage

Before start to use the acs-cmd utility, you need to:

• Port forward the Magda database to local:
  • kubectl port-forward combined-db-postgresql-pg17-0 5432:5432
    • If you didn’t install magda to the default namespace, you can use: kubectl port-forward -n [namespace] combined-db-postgresql-pg17-0 5432:5432

Prior to Magda v7.0.0, you should port-forward pod combined-db-postgresql-0

Prior to Magda v1.0.0, you should port-forward pod combined-db-0

acs-cmd connects to the authorization database using the standard libpq PG* environment variables. Set PGHOST, PGPORT, PGUSER and PGPASSWORD to match your deployment — e.g. the port-forwarded in-cluster database above, or an external database such as AWS RDS with its own host and credentials.

If you use the in-cluster combined database, from Magda v7.0.0 it enforces TLS with a self-signed certificate. Over a kubectl port-forward that certificate cannot be verified (its subject will not match 127.0.0.1), so the connection fails with Error: unable to verify the first certificate. For this local, one-off connection, enable TLS without certificate verification:

export PGSSLMODE=require
export NODE_TLS_REJECT_UNAUTHORIZED=0

To set a user as admin users:

acs-cmd admin set [userId]

Or remove admin status / role from the user:

acs-cmd admin unset [userId]

To find out the user id of your account, you can:

acs-cmd list users