Skip to content

User Management (for Developers)

This section describes how to manage developers for your tenant. MindSphere separates between the users on the platform itself that are allowed to access the Launchpad and applications and users within Cloud Foundry. User Management enables you to assign permissions and roles to your employees.

To add a new developer to your MindSphere account (tenant) it is required:

Prerequisites

The below actions require the following rights:

  • You need to be Tenant Admin.
  • You need to have the OrgManager role assigned for your Cloud Foundry Org.
  • You have installed Cloud Foundry CLI.
  • The developer to be added has at least signed in one time to Cloud Foundry via the CLI.

Invite developer to your tenant by User Management application

A user with Developer roles is able to access the Developer Cockpit and manages application versions and registration workflows.

Adding users

  • Go to your Launchpad and open the User Management.
  • Open "Users" and click on plus symbol to add new user.
  • Enter the E-mail address of the new user.
  • Confirm your entry with "Save User".

The user receives the link for accessing MindSphere tenant via email.

Assigning developer roles to user

To access the Developer Cockpit you must assign user mdsp:core:Developer or the mdsp:core:DeveloperAdmin role.

  • Go to your Launchpad and open the User Management.
  • Open "Users" and select the new user.
  • Select "Edit" in the editing function field.
  • Assign the corresponding unassigned role (mdsp:core:Developer or mdsp:core:DeveloperAdmin) to the user.
  • Click on "End editing"

Developer(Developer and DeveloperAdmin) roles are successfully assigned to user.

Add a developer to your tenant via CF CLI

Cloud Foundry on AWS can be fully managed using the Cloud Foundry CLI and is integrated with WebKey as an identity provider. This allows developers to sign in to Cloud Foundry with their normal MindSphere account. During the order process of an MindSphere DevOps Plan (Developer/Operator) the designated administrator gets automatically the admin privileges assigned for the Cloud Foundry Org. But you are currently required to use the CF CLI if you want to add any additional developers.

Steps to add developer to Cloud Foundry Org and Space

  1. Login to the Cloud Foundry CLI (see the Getting Started).
    1
      cf login -a https://api.cf.eu1.mindsphere.io --sso
    
  2. Visit https://login.cf.eu1.mindsphere.io/passcode in browser.
  3. Login using the WebKey Link below the Cloud Foundry Login Form.
    Login with WebKey to Cloud Foundry
  4. Type in your MindSphere Credentials.
  5. Copy the One Time Code and paste this code in the CF CLI and click enter.
  6. Select your Org.
  7. Add the developer to your Org.

    1
      cf set-org-role USERNAME ORG ROLE
    
    !!! info A user must have the CF role SpaceDeveloper to push an application.

  8. Alternative: Assign the developer to a particular space instead to the Org.

    • Create a new space within your Org.
      1
          cf create-space space-name
      
    • Assign the developer only to this particular space by using following command.
      1
          cf set-space-role USERNAME ORG SPACE ROLE  
      

The developer can view and push applications to the assigned CF space.

Please read the official Cloud Foundry Docs to learn about the different user roles and permissions: Cloud Foundry Roles and Permissions Getting started with the cf CLI

Cloud Foundry Access

The creation of the account does not automatically grant access rights to your Cloud Foundry Org. However, the newly created user can already login in the Cloud Foundry environment. After the successful login the user is known in the Cloud Foundry UAA and the Org-Manager can assign either Org or Space rights. See the [Cloud Foundry Howto]

Any questions left?

Ask the community


Except where otherwise noted, content on this site is licensed under the MindSphere Development License Agreement.