Create App Users
- Capella Operational
Creating and editing App Users for a synchronized application using the Capella UI
Concept
Users are one of the cornerstone concepts of access control. You can restrict document access to specific users and-or to users with specific roles.
As an entity, a user comprises a name, password, list of roles and a list of channels. These channels are organised within a linked Collection to a given Scope within your App Endpoint.
App Services Users
They are created and operate solely within the App Services ecosphere to govern access to replication data and to the Public API.
Users granted access to a channel can access all documents assigned to that channel.
Users can also be assigned to zero or more roles. A user inherits the channel access of all roles it belongs to. This is very much like Unix groups, except that roles do not form a hierarchy.
App Users are now organized at the collection level instead of at the bucket level. |
In this section, we’ll show you how to create new users in App Services. Before you start, make sure you’re logged on to your Capella instance as an administrator.
-
Select your App Endpoint
-
Select the Security tab.
-
From the menu on the left, select App Users
Click + Create App User
From here, you can fill in the UserName, the password and set whether the user is enabled. You can also add the channels the user can access. Fill in the name of the channel, and then press the + button to add it to the list of channels. (For more information, see Add Security with Channels)
At this point, you can also assign administration roles to your new user.
When you’re ready, save the new user by clicking CREATE APP USER
You can change any user details, or reset their password, by selecting the user from the list:
From the Edit App User page, you can perform the following actions:
-
Changing the user’s password.
-
Enabling or disabling the App User.
Disabled App Users cannot access App Endpoints. |
-
You can assign additional App Roles and Channels to the App User.
-
You can view non-admin channels assigned to the user per collection via existing user roles or the Access Control Function.
-
You can also view admin channels assigned by the Access Control Function per collection under the Channels assigned by access control and data validation function section.
App Roles and channels created by the Access Control Function and assigned to the App User cannot be edited or deleted by the Capella UI or Admin API. You will need to edit the Access Control Function to apply any changes to these App Roles and channels. |