This article covers role management rights that pertain to Kafka MDS nodes.
| Right | Feature Code | Explanation |
| Add Kafka Principal Role | EXCMD_ADD_KAFKA_PRINCIPAL_ROLE | Allows users to add a new principal for a role (such as ClusterAdmin or AuditAdmin), using the Add New Principal button on the details dialog for the role. |
| Add Kafka Principal Role Resources | EXCMD_ADD_KAFKA_PRINCIPAL_ROLE_RESOURCES | Allows users to assign a principal to a role resource (such as topics or permissions). The ability to assign a principal to a role resource type does not apply to the Cluster Role Scope or the ksqlDB Cluster Type. |
| Remove Kafka Principal Role | EXCMD_REMOVE_KAFKA_PRINCIPAL_ROLE | Allows users to remove a principal from a role, using the Delete Principal button on the details dialog for the role. |
| Remove Kafka Principal Role Resources | EXCMD_REMOVE_KAFKA_PRINCIPAL_ROLE_RESOURCES | Allows users to remove a principal from a resource type. |
| Set Kafka Principal Role Resources | EXCMD_SET_KAFKA_PRINCIPAL_ROLE_RESOURCES | Allows users to override existing role resources for a principal by assigning a new set of resources. |
| Show Kafka MDS | EXCMD_INQUIRE_KAFKA_MDS | Allows users to view the details of a specific Kafka MDS node. |
| Show Kafka MDS Names | EXCMD_INQUIRE_KAFKA_MDS_NAMES | Allows users to view a list of the Kafka MDS nodes that exist. |
| Show Kafka MDS Visible Clusters | EXCMD_INQUIRE_KAFKA_MDS_VISIBLE_CLUSTERS | Allows users to view a list of the visible Kafka clusters that host MDS. |
| Show Kafka Principal Role Resources | EXCMD_INQUIRE_KAFKA_PRINCIPAL_ROLE_RESOURCES | Allows users to view a list of the resource types that a principal has access to. |
| Show Kafka Principal Roles | EXCMD_INQUIRE_KAFKA_PRINCIPAL_ROLES | Allows users to view a list of the principals that exist. |
| Show Kafka Role | EXCMD_INQUIRE_KAFKA_ROLE | Allows users to view the details of a specific Kafka role. |
| Show Kafka Role Names | EXCMD_INQUIRE_KAFKA_ROLE_NAMES | Allows users to view a list of the Kafka roles that exist. |
| Show Kafka Role Principals | EXCMD_INQUIRE_KAFKA_ROLE_PRINCIPALS | Allows users to view a list of the principals that a role is bound to. |