Cloud 5 - Admin Console

Ever wonder why what each item does in the context of AEM within the Admin Console? The team tries to explain some common things that people should know about provisioning and access.

Transcript
Hey. Excellent. How are you, Darin? Good to see you. Good. Here. I’ve got an idea. So since we’re cloud five, - I’d like to present my list of the top - five cloud related movies. What do you think? Good idea. Fantastic idea. I’m excited to see this list. All right, here’s my list. Number five: Up in the Air. That George Clooney movie about him - being flying around the country. Excellent movie. Yep. Set in beautiful Omaha. Number four: Cloud Atlas. The Tom Hanks. 45 hour epic movie. It’s got cloud in the name, at least. I’ll give you the cloud in the name part. Otherwise. Not my not my favorite. All right. Well, then number three, this is to - two movies here, but same kind of title. So Cloudy - With the Chance of Meatballs, one and two.
That’s a great choice. Got to love that one. It’s the. Classic. Yeah. Number two: Airplane! Oh, yeah, of course. Yeah. The original think was 1980. What a fantastic movie. Yeah. Love it.
And then my number one movie, - of course, is Star Wars.
I don’t really see how that has anything to do with clouds there. There’s these clouds. There’s clouds in that cloud city. Bespin or wherever they freezed Han Solo. Right, right. I mean, Empire Strikes Back. There’s a big difference - between Star Wars, the original, and Empire Strikes Back. You said you said Star Wars, - not Empire Strikes. Back. But it’s. But it’s Star Wars. No, no, no, no. It’s Empire Strikes Back.
Empire Strikes Back.
So the admin console - I want to assign James access, and so I click on the manage access button - down there in my cloud manager instance, you can see it pops up on the admin - console window. But in here is our product profile for the instance - that I want to give him access to with two different product profiles - themselves are administrators and users. Admins are the basic admin user. So you’re familiar with AEM users - - basically the basic contributor level read only user. So you should be able to cover most - of your use cases with those two profiles. Let’s go over to the user - and then into the user groups. And I’ve created a C5 group - and this group I’ve added James. So, James, what else I need to do? Well, - you know, the provisioning magic happens when a user is assigned a product profile. As you can see here, we’ve - already been assigned to cloud service, but I can add other additional product - profiles here. So for example, if we get into Target, - you’ll also see that there is an admin tab and you can assign an admin to the group and the admin can add and remove users - and so forth. This can also - be done on a per group basis. Now I’m going - to take and I’m going to actually log in and authenticate - into AEM as a cloud service. And let’s see what happens. Darin can show us - what happens on the back end. So so yeah. So now that James is logged - in, I’m going to jump back over to my AEM instance and verify that he is indeed here - clicking on the security users and I’ll find him fortunately he is at - the top of the list, so it’s pretty easy. Just click on his name - and then click the groups filter to see that he is - part of that newly sync’d over C5 group as well as the AEM users group, - which is a default product profile what we’ll get here is jump over to the groups and then James, - what else is in here? Yeah, so you can see here, - as Darin is searching for the group you could see that the IMS group access - doesn’t provide any access control at all. Let’s provide - access to the entire group here.
So yeah, this is just as easy as going into - the security permissions card. And again, we search for our group, - find our group there, see that we have access to do anything useful - in there, just home group at this point. And we have an access control entry. Choose a path. In our case, the AEMRockstar EN US submission guide page and click select and the permission - type of allow as well as not read permission but write permission - to that particular path. So you can add - very granular permissions to this. And now that we’ve added the permissions, James should be able to log in - and create rockstar submissions I guess. Yep. Works perfectly on this end Darin.

Content covered in this video

recommendation-more-help
4859a77c-7971-4ac9-8f5c-4260823c6f69