﻿Identity Access Management ensures that the right people and job roles in your organization
can access the tools and capabilities required
to perform their work in a secure manner.
In this demo, we’re going to learn how to create and assign
users, groups, roles, and spaces
using the intuitive, self-service interface in HPE GreenLake Central.
Let’s start by logging into HPE GreenLake Central.
Next we’ll select the 'Configure' option on the navigation bar…
…and choose Identity & Access.
From here, we can choose to manage users, groups, roles, or spaces.
Let’s first create a new user group.
A user group is a named set of users
that share a common set of job functions or access requirements.
Select 'Create User Group' on the top right.
For this demo, we’re going to create a New User Group
called “GreenLake Central Default New Users.”
And optionally, a 'Description.'
Then click on the 'Create User Group' button.
Now we see our new User Group,
in the list of available User Groups.
Next we’ll create a new user.
Select 'Add User' from the Actions menu on the right.
Enter the user’s first and last name…
For the purposes of this demo,
we’ll enter the first name '"New” and last name "User.”
The default email domain is pre-populated for each customer.
When ready, click 'Add User'.
You’ll now see “New User” has been added.
Click on the new user name to bring up details about this user.
Here you can see that a user ID has been created.
You can also see that this user has not been assigned to a User Group yet.
Let's do that now.
Click on the 'Add to User Groups' from the pull-down Actions menu.
Select the User Group we previously created.
Click on the 'Add to User Groups' button at the bottom.
Verify that the User was properly added to the User Group.
Now let’s create a space by selecting the 'Spaces' tab on the top navigation.
A space enables you to grant users access to a defined subset of resources
instead of to the entire HPE GreenLake environment.
The primary purpose of a space is to provide access boundaries.
Here you can see that there are various spaces that have been created.
To create a new space, click on 'Create Space' on the right side of the screen.
Let’s create a new space called ‘Trial Management’.
Next we’ll assign the Resources we want to make available to this space.
A resource is a virtual or physical object that is managed by a service.
Resources can include disk storage, an Azure subscription,
or a compliance report.
Click on ‘glc’ to drill down into the specific options available for HPE GreenLake Central.
Select ‘All Trials’.
Confirm selection under the Resource Summary and click on 'Create Space.'
Confirm the ‘Trial Management’ space has been created under the list of spaces.
Next we’ll create a new Role.
A role is a named set of permissions used to access resources.
Roles are assigned to users to grant them the permissions
that make up the role for a specific set of resources.
We can see here that there are many predefined roles available to choose from.
For this purposes of this demo,
we’re going to create a new role that enables users to view a trial.
Select 'Create Role' on the right side of the screen.
Assign the name ‘New User – Trial Viewer’ to the new role.
Click on the pull-down menu in the Space field…
…and select the new Space we just created: Trial Management.
When creating a new role,
we can either choose to copy the permissions of an existing role
or select from a list of predefined permissions in the Permissions field.
For this demo, we’re going to choose the 'View trial offer information permission.'
After making your choice, click on the 'Create Role' button at the bottom.
You can now see the newly created role, New User – Trial Viewer,
with a Type of ‘Custom’ and one permission granted.
Next we’ll want to assign the new role to our space.
Click on the 'Spaces' tab in the navigation
and select 'Trial Management' from the list of spaces displayed on the screen.
Select 'Create Assignment' from the Actions menu.
Select the user, New User, that we created earlier in the demo.
Now choose the Role that you’d like to assign to that user.
Let’s choose the role we just created, 'New User – Trial Viewer.'
Review the Assignment details and click on the box to confirm.
Click on 'Create Assignment' to complete the task.
In this demo, we’ve learned how to quickly and easily create and assign users,
user groups, roles, and spaces
using the intuitive, self-service menus in HPE GreenLake Central.
HPE GreenLake Central Identity & Access Management
provides a simple, yet secure, way to protect your HPE GreenLake environment.