Product Features

Security

4min

You can use the Security module in Unified Namespace (UNS) to establish secure access to the message broker by allowing only authorized users to publish or subscribe to messages. It also provides tools to manage and control MQTT client accounts.

Overview of MQTT Accounts

An MQTT account represents a client connection to the message broker. Each account can:

  • Be assigned specific permissions (e.g., publish, subscribe, or both).
  • Be managed (reset passwords, enable/disable accounts).

There are two types of MQTT accounts:

  1. General MQTT Client Accounts: For standard client connections.
  2. Litmus Edge (LE) Client Accounts: These include additional features, such as using a single connection token for streamlined access.

Access MQTT Accounts Module UI:

To access MQTT accounts pane:

  1. Navigate to the Security page.
  2. Click on Accounts tab to view detailed information.

Refer to the following actions you can take from the MQTT Account Details Web UI pane.

MQTT Account Details
MQTT Account Details


Action

Details

[1] MQTT Account

Choose the client account type and set the required account details, including a username and permissions.

[2] Rules

Define rules to specify topics and permissions (e.g., Publish & Subscribe).

  • Click the + icon to add a new rule.
  • Edit or delete existing rules using the Actions icons.
  • View a list of all rules assigned to this account with a search and filter option.

[3] Actions

  • Click Reset Password to generate a new password for the selected account.
  • Use the Disable Account button to restrict access for a client temporarily.
  • Re-enable the account by clicking Enable Account.
  • To remove an account permanently, click Delete Account.

Tip: Disable unused accounts instead of deleting them to retain historical data.