User and permission management in RabbitMQ - Practice Problems & Coding Challenges

Challenge - 5 Problems

💻 Command Output

intermediate

RabbitMQ User Listing Output

What is the output of the command rabbitmqctl list_users after creating two users named alice and bob with tags administrator and monitoring respectively?

RabbitMQ

rabbitmqctl add_user alice password123
rabbitmqctl add_user bob password456
rabbitmqctl set_user_tags alice administrator
rabbitmqctl set_user_tags bob monitoring
rabbitmqctl list_users

A

Listing users ...
alice	[monitoring]
bob	[administrator]

B

Listing users ...
alice	[]
bob	[]

C

Listing users ...
alice	[administrator]
bob	[monitoring]

D Error: user not found

💡 Hint

Remember that user tags are assigned explicitly and shown in brackets after the username.

The command list_users shows all users with their assigned tags. Since alice was tagged as administrator and bob as monitoring, their tags appear accordingly.

❓ Configuration

intermediate

Setting RabbitMQ Permissions

Which configuration command correctly grants the user alice full permissions on the virtual host /?

A rabbitmqctl set_permissions -p / alice "." "." "."

B rabbitmqctl set_permissions alice / ".*" ".*" ".*"

C rabbitmqctl set_permissions -p alice / ".*" ".*" ".*"

D rabbitmqctl set_permissions -p / alice ".*" ".*" ".*"

💡 Hint

The correct syntax requires specifying the virtual host with -p before the username.

The command syntax is rabbitmqctl set_permissions -p [vhost] [user] [conf] [write] [read]. Option D correctly uses this syntax with regex patterns ".*" to allow all.

❓ Troubleshoot

advanced

Diagnosing Permission Denied Error

A user bob tries to publish messages to a queue but receives a permission denied error. Which of the following is the most likely cause?

A User bob has no write permission on the virtual host for the queue.

B User bob is not created in RabbitMQ.

C User bob is not tagged as administrator.

D User bob's password has expired.

💡 Hint

Publishing requires write permission on the virtual host.

Permission denied errors when publishing usually mean the user lacks write permission on the virtual host. Tags like administrator do not grant permissions automatically.

🔀 Workflow

advanced

User Creation and Permission Setup Workflow

What is the correct order of commands to create a user charlie, assign the tag management, and grant read and write permissions on virtual host /app?

A 1,3,2

B 3,1,2

C 2,1,3

D 1,2,3

💡 Hint

User must exist before assigning tags or permissions.

First create the user, then assign tags, then set permissions. Permissions depend on the user existing.

✅ Best Practice

expert

Best Practice for RabbitMQ User Permissions

Which option best follows the principle of least privilege when assigning permissions to a RabbitMQ user?

A Grant full permissions ".*" on all virtual hosts to simplify management.

B Grant only the necessary read and write permissions on specific virtual hosts and queues the user needs.

C Create one user with full permissions and share credentials among team members.

D Assign administrator tag to all users to avoid permission issues.

💡 Hint

Least privilege means giving only what is needed, no more.

Best practice is to limit user permissions to only what they require to reduce security risks. Administrator tags and full permissions increase risk.