Quickstart
The organization and the first user must have been created beforehand.
The steps for managing rights are as follows:
- If the administrator wants to use API, they must create a service account in the organization and assign roles or permissions to it. The administrator can then use the portal or the API endpoints with their service account, to create the new spaces required.
- After a space is created, the administrator can assign users or service accounts to it.
In summary, four features must be implemented to manage an organization:
- the creation of users;
- the creation of service accounts;
- the creation of spaces;
- the assignment of roles or permissions.
Access management is the phase of assigning roles and permissions for each user account and service account:
The Console displays the name of the roles and permissions in text form.
To manipulate rights through API, you must use the UUID (Universally Unique Identifier) of the roles and permissions. It is therefore necessary to obtain their text equivalent.
Only a user with sufficient rights to list, assign and delete roles or permissions can perform these operations. A user has rights on a space only if they are themselves part of that space. As each space is isolated from the others, the identifier of the roles will vary from one space to another.
(See the manipulation examples in the API tabs of the actions)
1: Manage a user's rights on the console
To act on a user's roles and permissions, go to the user details page and click Actions.
Then click Manage roles or Manage permissions depending on the actions you want to perform.