User Account Management

Managing DC/OS user accounts

DC/OS is designed as a multi-user system.

Open DC/OS can handle three types of user accounts:

• External user accounts: External user accounts exist for users who want to use their Google, GitHub, or Microsoft credentials. DC/OS never receives or stores the passwords of external users.
• Local user accounts: Local user accounts exist for users who want to create a user account within DC/OS. Usernames and password hashes are stored in IAM database.
• Service accounts: A machine interacting with DC/OS should always go through a service account login for obtaining an authentication token. Do not use a username/password-based login in that case.

User accounts can be managed by any authorized user. To bootstrap this process, in Open DC/OS an external user is automatically created by the first user who logs in via the web interface.

NOTE: Any user with access to DC/OS can create more user accounts. Each user account in DC/OS is an authorized administrator account, there is no explicit concept of privileges with Open DC/OS.

External User Account Management

Managing external user accounts

Local User Account Management

Managing local user accounts

Service Account Management

Managing service accounts

Troubleshooting User Account Management

Troubleshooting user account management issues