- 3 minutes to read

FAQ - Delegated Queue Management

Question

How do I grant operations teams access to purge queues without Management UI?

Answer

Use Nodinite Roles to define permissions (e.g., "RabbitMQ Operations" role can purge test queues, view production queues). Assign users to roles, create Monitor Views filtered to approved virtual hosts or queue patterns—users perform actions from Web Client with full audit trails, no Management UI credentials required.

Benefits of Delegated Access

  • Eliminate Management UI access sprawl—no need to grant RabbitMQ admin credentials to help desk or operations teams
  • Role-based permissions—fine-grained control over who can view/modify which queues
  • Virtual host isolation—operations team sees only /orders virtual host, not /payments or /admin
  • Full audit trails—every action logged with UserID, Timestamp, IP Address, QueueName, Action
  • No RabbitMQ training required—simple web interface, no rabbitmqctl or Management UI navigation

Configuration Steps

1. Create Nodinite Role

Define role with appropriate permissions:

Example: "RabbitMQ Operations" role:

  • View queues in /orders and /shipments virtual hosts
  • Purge queues in /test virtual host only
  • View bindings and consumer status
  • Cannot delete exchanges, modify policies, or access other virtual hosts

2. Create Monitor View

Filter resources by virtual host or queue pattern:

Example: "Operations Queue View"

  • Include: Queues matching /orders/* and /shipments/*
  • Exclude: Queues matching /payments/* or /admin/*

3. Assign Users to Role

Add operations team members to "RabbitMQ Operations" role.

4. Grant Access to Monitor View

Users access filtered view from Web Client:

  • Dashboard shows only permitted queues
  • Actions menu displays allowed operations (purge for test queues, view-only for production)
  • Audit log records all actions

Example Use Cases

Test Environment Cleanup

Developer runs load test, generates 10,000 junk messages in test.orders queue.

Without delegation: Developer requests operations team to purge queue → ticket created → operations team logs into Management UI → navigates to virtual host → finds queue → purges → confirms → closes ticket = 15-30 minutes.

With delegation: Developer opens Nodinite → selects test.orders from queue list → clicks "Purge" → confirms = 30 seconds.

Production Queue Troubleshooting

Operations team needs to check consumer status during incident.

Without delegation: Escalate to RabbitMQ admin for Management UI credentials → wait for approval → access granted temporarily → investigate → revoke access = security risk + delays.

With delegation: Operations team opens assigned Monitor View → views consumer count, connection details, prefetch settings → diagnoses issue immediately = instant access, zero security risk.

Audit Trail Example

Every action logged in Nodinite:

Timestamp User Action Resource Details IP Address
2025-10-17 14:32:18 jsmith Purge Queue test.orders 10,247 messages deleted 10.1.5.42
2025-10-17 15:18:03 mjones View Queue Details prod.shipments Consumer count: 3, Depth: 127 10.1.5.88

Audit logs meet compliance requirements (SOC 2, GDPR, HIPAA) for access control and accountability.

Next Step

Managing RabbitMQ
Configuration Guide

RabbitMQ Agent Overview
Troubleshooting Overview
What is a Role
What is a Monitor View