You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
title: Manage users in Microsoft Azure Data Manager for Energy
2
+
title: Manage users in Azure Data Manager for Energy
3
3
description: This article describes how to manage users in Azure Data Manager for Energy.
4
4
author: shikhagarg1
5
5
ms.author: shikhagarg
@@ -9,7 +9,7 @@ ms.date: 08/19/2022
9
9
ms.custom: template-how-to
10
10
---
11
11
12
-
# Manage users
12
+
# Manage users in Azure Data Manager for Energy
13
13
14
14
In this article, you learn how to manage users and their memberships in OSDU groups in Azure Data Manager for Energy. [Entitlements APIs](https://community.opengroup.org/osdu/platform/security-and-compliance/entitlements/-/tree/master/) are used to add or remove users to OSDU groups and to check the entitlements when the user tries to access the OSDU services or data. For more information about OSDU groups, see [Entitlement services](concepts-entitlements.md).
15
15
@@ -34,14 +34,14 @@ The object ID (OID) is the Microsoft Entra user OID.
34
34
## First-time addition of users in a new data partition
35
35
36
36
1. To add the first admin to a new data partition of an Azure Data Manager for Energy instance, use the access token of the OID that was used to provision the instance.
37
-
1. Get the `client-id` access token by using [Generate client-id access token](how-to-generate-auth-token.md#generate-client-id-auth-token).
37
+
1. Get the `client-id` access token by using [Generate client-id access token](how-to-generate-auth-token.md#generate-the-client-id-auth-token).
38
38
39
39
If you try to directly use your own access token for adding entitlements, it results in a 401 error. The `client-id` access token must be used to add the first set of users in the system. Those users (with admin access) can then manage more users with their own access token.
40
40
1. Use the `client-id` access token to do the following steps by using the commands outlined in the following sections:
41
41
1. Add the user to the `users@<data-partition-id>.<domain>` OSDU group.
42
42
2. Add the user to the `users.datalake.ops@<data-partition-id>.<domain>` OSDU group.
43
43
1. The user becomes the admin of the data partition. The admin can then add or remove more users to the required entitlement groups:
44
-
1. Get the admin's auth token by using [Generate user access token](how-to-generate-auth-token.md#generate-user-auth-token) and by using the same `client-id` and `client-secret` values.
44
+
1. Get the admin's auth token by using [Generate user access token](how-to-generate-auth-token.md#generate-the-user-auth-token) and by using the same `client-id` and `client-secret` values.
45
45
1. Get the OSDU group, such as `service.legal.editor@<data-partition-id>.<domain>`, to which you want to add more users by using the admin's access token.
46
46
1. Add more users to that OSDU group by using the admin's access token.
47
47
@@ -60,53 +60,53 @@ Run the following curl command in Azure Cloud Bash to get all the groups that ar
60
60
1. Run the following curl command in Azure Cloud Bash to add the users to the users group by using the entitlement service.
61
61
1. The value to be sent for the parameter `email` is the OID of the user and not the user's email address.
62
62
63
-
```bash
64
-
curl --location --request POST 'https://<URI>/api/entitlements/v2/groups/<group-name>@<data-partition-id>.dataservices.energy/members' \
0 commit comments