Apache Cassandra
TMA-CASSANDRA-3.3
Ensure there are no unnecessary roles or excessive privileges
MediumLevel 1Manual reviewcassandra
Description
Verify each role is require and has only the privileges needed to do its job.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
As a superuser, retrieve all roles: list roles; Retrieve all permissions for all roles select * from system_auth.role_permissions; If there are any unnecessary roles or roles with excessive privileges this is a finding.
How it is fixed
Fix method: Guidance or infrastructure patch
Remove any unnecessary roles and/or permissions in accordance with organizational needs.
Properties
- Operating systems
- Any
- Tags
- cassandraprivileges
- Reference
- CIS Apache Cassandra 5.0 Benchmark v1.1.0 - 3.3 Ensure there are no unnecessary roles or excessive privileges