4.1 Users and Roles

Understand the following terms before you begin performing User Management.

• Users: Customers create users in Identity and Access Management (IAM) and can do the following:
  • Map them to existing groups
  • Create new groups to map them

  After users are created, they are synced from IAM to ASB CS.

• Groups: Groups are seeded (available out-of-the-box) by ASB CS. Customers can also create new groups in IAM. After groups are created, they are synced from IAM to ASB CS. Groups are mapped to roles using ASB CS by the same user that was created using IAM.
• Roles: Roles are seeded by ASB CS. Customers can also create new roles using ASB CS and assign existing functions to these new roles.
• Functions: Functions are seeded by ASB CS. Customers cannot create new functions; however, they can only use the existing functions.