Cloud 5 - Admin Console

Transcript

Hey, excellent. How are you Darren? Good to see you. Good. I’ve got an idea. So since we’re cloud five, I’d like to present my list of the top five cloud-related movies. What do you think? Good idea. Fantastic idea. I’m excited to see this list. All right, here’s my list. Number five, Up in the Air. That George Clooney movie about him, you know, being flying around the Excellent movie. Yep, set in beautiful Omaha. Number four, Cloud Atlas, the Tom Hanks 45-hour epic movie. It’s got cloud in the name at least. I’ll give you the cloud in the name part otherwise not my favorite. All right, well then number three. This is two two movies here but same kind of title. So, Clyde with a Chance of Meatballs one and two. That’s a great choice. Gotta love that one. Absolutely. Classic. Yeah. Number two, Airplane. Oh, yeah, of course. Yeah, the original. I think it was 1980. What a fantastic movie. Yeah, love it. And then my number one movie of course is Star Wars. I don’t really see how that has anything to do with clouds, Darren. There’s clouds. There’s clouds in that cloud city on Bespin or wherever they created Han Solo, right? Right? I mean Empire Strikes Back. Darren, there’s a big difference between Star Wars the original and Empire Strikes Back. You said Star Wars not Empire Strikes Back. But it’s Star Wars. No, no, no, no. It’s Empire Strikes Back. Star Wars. And Empire Strikes Back. So, in the admin console, I want to assign James access. So, I click on the manage access button down there in my cloud manager instance. You can see it pops open the admin console window. But in here is our product profile for the instance that I want to give him access to. The two different product profiles themselves are administrators and users. Admins are the basic admin users that you’re familiar with in AEM. Users is basically the basic contributor level read-only user. So, you should be able to cover most of your use cases with those two profiles. Let’s go over to the user and then into the user groups and I’ve created a C5 group. In this group, I’ve added James. So, James, what else do I need to do? Well, you know, the provisioning magic happens when a user is assigned a product profile. As you can see here, we’ve already been assigned to cloud service, but I can add other additional product profiles here. So, for example, if we get into target, you’ll also see that there’s an admin tab and we can assign an admin to the group and the admin can add and remove users and so forth. This can also be done on a per group basis. Now, I’m going to take and I’m going to actually log in and authenticate into AEM as a cloud service and let’s see what happens. Darren can show us what happens on the back end. So, yeah, so now that James is logged in, I’m going to jump back over to my AEM instance and verify that he is indeed in here clicking on the security users and I’ll find him. Unfortunately, he is at the top of the list, so it’s pretty easy just to click on his name and then click the groups filter to see that he is part of that newly synced over C5 group as well as the AEM users group, which is that default product profile. What we all want to check here is jump over to the groups and then James, what else is in here? Yeah, so you can see here as Darren is searching for the group, you can see that the IMS group access doesn’t provide any access control at all. Let’s provide access to the entire group here. So, yeah, this is just as easy as going into the security permissions card and again we search for our group, find our group there, see they only have access to do anything useful in their just home group at this point and we have an access control entry. Choose a path, in our case the AEM rockstar, AEM US submission guide page and click select and the permission type of allow as well as adding the, not read permission, but write permission to that particular path so you could add, you know, very granular permissions to this. And now that we’ve added the permissions, James should be able to log in and create rockstar submissions, I guess. Yep, works perfectly on this end, Darren.