Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Summary

Following feature updates are covered in this update:

  • Resource Access Management

  • Updated User Role Management

Resource Access Management

A new flow for Resource access management has been introduced in Account Server. Through this flow you’ll be able to create app level resource types (e.g. LOCATIONS, REPORTS, STORES, CLIENTS, etc.), roles associated with a particular resource type, domain level resources (e.g WAREHOUSE_BLR, STORE_DELHI, CLIENT_1, etc.) and the resource type roles will automatically get associated with the domain level resources.

There are 2 flows for the above scenario.

Super Admin Flow

  1. Here, the superadmin user can create app level resource by using the Manage Application Resources option next to Manage Application Roles.

...

Image Removed

2. Next, the user will be able to create roles associated with a resource type by using the Manage Application Roles popup. There is a bifurcation between app and resource level roles and you can use the radio button provided to choose the roles shown according to your choice.

...

For better understanding, let’s take an example.

For example, let's say we have an app level resource type WAREHOUSE and for a particular domain let’s say domain increff, we have resources WAREHOUSE_1, WAREHOUSE_2 & WAREHOUSE_3. So, what a domain admin can do is, he/she can assign roles to a user for a domain level resource, like allowing them to access only WAREHOUSE_1 & WAREHOUSE_2. This will help in simplifying the resource access management as currently this happens separately on different products.

There are 2 flows for the above scenario which have been explained below.

Internal / Super Admin Flow

Read about the Internal flow here: /wiki/spaces/SAP/pages/366837927

Domain Admin Flow

  • Here, the domain admin user will be able to create domain level resources on the basis of resource type available for the current logged in application.

  • The option to create domain level resource will only be enabled if the user has app.admin or resource.admin role.

...

3. Once a domain level resource is created, you will be able to view it inside the role management modal as used before for role management for a user.

User Role Management

User Role Management flow has been updated and is explained below.

  • Once you click on user’s name, the role management modal will show. Now you have 2 options based on Role Level - Top & Resource.

...