Manage Kafka
Service accounts and ACLs
Console lets you manage service accounts and ACLs (Access Control Lists).
What you see on the Service Accounts page will depend on whether you have configured a Kafka provider, such as Confluent or Aiven.
After selecting a service account, you can edit existing ACLs and add new resource ACLs. When you create new ACLs for a resource, you can:
Once you have configured Confluent Cloud as your provider, you can:
You can list and create API Keys associated with a Confluent Cloud service account:
Once you have configured Aiven as your provider, you can:
View service accounts and manage ACLs
The Service Accounts page in Console offers a powerful design that aggregates ACLs to principal granularity. This lets you easily understand all the resource ACLs assigned to each service account.
After selecting a service account, you can edit existing ACLs and add new resource ACLs. When you create new ACLs for a resource, you can:
- Use pre-configured permissions (e.g. Consumer, Producer, Admin)
- Manually define permissions
Provider integrations
Connect your Kafka provider to manage their benefits directly in Conduktor Console. The additional functionality you get from connecting your provider is made possible via their APIs. To use Kafka provider service account functionality, you have to configure the provider. Go to Settings > Clusters, select a cluster and use the Provider tab.
Confluent Cloud
When configuring Confluent Cloud as your provider, ensure you use Confluent Cloud API keys.
- Manage service accounts and ACLs
- Manage API keys
You can list and create API Keys associated with a Confluent Cloud service account:
Aiven
When configuring Aiven as your provider, you can generate your API token following this guide, and get the project name and service name fields in the below locations from within the Aiven console.
- Manage service accounts
- Manage ACLs