Creating External Users πŸš€

Creating External Users

To create an External User, click Setup β†’ Users & Groups β†’ External Users β†’ New User.

In the dialog window that appears, fill in the fields in these tabs:

  1. Details: credentials and details of the user.

  2. Access credentials: authentication keys required for secure access to the Amazon S3 server.

Details tab

Fill in these fields of the Details tab to configure the External User.

Field
Description

NAME

Name of the user.

SURNAME

Last name of the user.

EMAIL

Email of the user.

GROUPS

Group/s to which the user will belong.

USERNAME (*)

Username to log into the application.

PASSWORD / CONFIRM PASSWORD (*)

Password to log into the application. See the details in the Setting the password policy page.

ACTORS

Select the Actor you want to associate with the External User you are creating. An Actor is a data provider/publisher or data consumer/subscriber that interacts with PRIMEUR Data Mover.

ENABLED / DISABLED

The user can be enabled or disabled in the system.

Once you have created the external user, click Create to confirm.

Access Credentials tab πŸš€

The Access Credentials tab is available only if the Amazon S3 server is licensed in Data Mover.

In the Access Credentials tab, you can define authentication keys required for secure access to Amazon S3 resources.

Both keys can be entered manually or can be automatically generated by clicking the Generate button.

Field
Description

Access key

Unique identifier used to authenticate the external user when accessing Amazon S3. This key works together with the Secret key to provide secure access.

Secret key

Confidential key paired with the Access key. It must be entered exactly as generated or provided.

For Amazon S3, the certificate must have the Extended Key Usage (EKU) extension. A self-signed certificate is not enough, the client connection would not work.

Once you have defined the authentication keys, click Create to confirm.

Editing User Attributes

To edit the attributes of a user, click the icon on the right of the screen. In the window, edit the user attributes as needed. Click Save to confirm your changes.

On the right of the screen, clicking the three-dot icon, the following options will appear:

  • Assign to an Actor/Unassign from Actor: select this option to assign or unassign the external user to an Actor or from an Actor.

  • Unbind from repository: selecting this option, the External User will no longer have access to external configuration of user permissions such as LDAP or IAM. Once selected, the User will be removed from the Results list. To bind the user again, select the BIND USER button.

  • Disable: selecting this option, the External User will no longer be able to authenticate in PRIMEUR Data Mover. Once the user is disabled, the option will change to Enable.

  • Delete: Selecting this option, the External User will be removed from PRIMEUR Data Mover.

Binding allows you to grant permissions to an external configuration of user permissions, for example in LDAP or IAM.

To bind an External User, go to Setup β†’ Users & Groups β†’ External Users β†’ Bind User. On the left of the mask, select the External User you want to bind to the Actor. On the right, select the Actor. When done, choose the BIND USER button to confirm the link.

Last updated