Users

Objective
Prerequisites
Create a User and Assign Roles
Create User Groups and Add Users
Concepts

Objective

This guide provides information on how to create users and assign roles in the F5® Distributed Cloud Services using the F5® Distributed Cloud Console. The console's Role-based Access Control (RBAC) is used to define and enforce user capabilities while using the F5 platform. For more information on roles and access control, see Roles.

Prerequisites

A valid Account is required.

Note: If you do not have an account, visit Create an Account.

Create a User and Assign Roles

You can configure SSO for your organization, and assign roles to the users after they log into the F5® Distributed Cloud Console. You can create users from the platform and assign roles. You can also create a debug user to grant tenant access to F5 support engineer for performing troubleshooting activities.

See SSO guides in the User Management part of documentation for instructions on configuring SSO for your enterprise.

Perform the following to create a user from the platform, and assign roles to the user:

Features can be viewed, and managed in multiple services.

This example shows User setup in Administration.

Step 1: Navigate to user management, and open user creation form.

Open F5® Distributed Cloud Console > select Administration box.

Note: Homepage is role based, and your homepage may look different due to your role customization. Select All Services drop-down menu to discover all options. Customize Settings: Administration > Personal Management > My Account > Edit work domain & skills button > Advanced box > check Work Domain boxes > Save changes button.

Note: Confirm Namespace feature is in correct namespace, drop-down selector located in upper-left corner. Not available in all services.

Select IAM in left-menu > select Users.

Note: If options are not showing available, select Show link in Advanced nav options visible in bottom left corner. If needed, select Hide to minimize options from Advanced nav options mode.

Select + Add user button.

Add new user window pops-up.

USER 7 4 — Figure: Add New User Pop-up Window

Step 2: Enter basic configuration, and assign roles to the user.

Select User Type drop-down menu option:
- SSO User: If you enabled SSO for the tenant.
- F5 User: If users log in using their email address and password. SSO must be disabled in order to create a user of type User.
- Debug User: To create a debug user to grant access to F5 Distributed Cloud Services. Create a support representative for troubleshooting purpose. There can be only one debug user at any point of time.

Note: You can have only one of the SSO User and User type enabled at any point of time.

Enter data for SSO User or User with steps below:
- Enter Email address of the user.
- Enter First Name in box.
- Enter Last Name in box.

Select + Assign roles and namespaces to customize in pop-up window.
- Select Namespace from drop-down menu options, or all application namespaces.
- Optionally, select the Make Admin checkbox to enable administrator role for the namespace selected.
- Select Role needed by checking boxes.
- Select Add roles button to apply roles to the user.

USER 7 6 — Figure: Add Roles and Namespaces

Step 3: Complete user creation.

Select Send Invite button for SSO User or F5 User user types.

Select Create Debug User button for Debug User user type.

DEBUGUSER7 3 — Figure: Create Debug User

Create User Groups and Add Users

Step 1: Create group.

Select Groups in IAM drop-down section in Administration.
Select Add Group button.

Enter Group Name.
Enter Group Description.

+ Assign Roles and Namespaces button.
- Select Namespace drop-down menu.
- Check Make Admin if applicable.
- Check Role(s) for group.
- Select Assign button.
Note: You can edit and Namespaces and Users sections by selecting ... in Actions column.
Select + Add Users button.
- Check users to add to group.
- Select Add User button.
Select Add Group button.
Select + Add Group button in upper-left corner to add additional groups.

Step 2: Add user to group.

Note: You can add, edit, and view groups in Users and Groups section of IAM.

Select Users in IAM drop-down section to add users to groups.

Note: Users Groups column will show which groups user is assigned.

USER GROUPS5 1 2E — Figure: Add User to Group

Select ... in Actions column.
Select Edit User.

Note: Add users you want to assign to your resource.

Select + Assign User to Group button to add group to user.
Check Group Name.
Select Assign to Group button.

Note: Select ... in Actions column to delete user from `Group Name'.

Select Assign Roles and Namespace button to add roles and namespaces to user.
- Select Namespace drop-down menu.
- Check Make Admin if applicable.
- Check Role(s) for group.
- Select Assign Roles button.
Select Save Changes button.
Confirm Groups column is updated to assigned group added.