Access Management and Environments on Software AG Cloud

system · May 7, 2020, 10:39am

Introduction:

This article explains about

Approach to secure the iPaaS offerings on Software AG Cloud.
Access Management for individual iPaaS offerings – i.e., webMethods.io Integration, webMethods.io API, webMethods.io B2B, webMethods Cloud Container and to the approach to secure the same.

You have an active subscription of the above offerings, you can subscribe to new offerings on Software AG Cloud. Please look at the documentation here https://docs.webmethods.io/b2b/webmethods_io_b2b_quick_start/chapter31/#how-to-register.

Software AG Cloud offers two types roles in this category.

Cloud-Tenant-Administrator: User subscribed to the Software AG Cloud offerings would inherit this role by default. Users part of this role would be able to perform the below platform administration areas,
- Access Management: Can provision access to new users and manage their access for the individual offerings. Individual Platform access can be managed by the role association for the users. To perform this, navigate to Administration from the App Switcher.

Platform Subscriptions: Can subscribe to a the iPaaS offerings, manage the existing platform subscriptions – stop, extend trails. To perform this, navigate to My Cloud from the App Switcher.

Policy Management: Can manage the Password sensitivity, expiration, re-use, etc. To perform this, navigate to Administration from the App Switcher, and navigate to policies.
SSO Configuration: Can manage the integration with the external identity providers. To perform this, navigate to Administration from the App Switcher, and navigate to Single sign-on.

Account-Administrator: User subscribed to the Software AG Cloud offerings would inherit this role by default. However, this role is not enabled by default upon subscription for free trails. Reach out to Software AG support to enable this feature. This role is enabled only when Account Management feature is enabled.
- Account Management: This feature requires Tenant to be configured with maximum number of environments that can be provisioned. This enables Account Administrator role and users part of this role can provision, link and manage more tenants as stages and these stages can be used for development lifecycle – e.g., Development, Testing, etc. Account Administrators can also manage stages as required. To perform this, navigate to Environments from the App Switcher.

webMethodsioIntegration-User: When a user is associated with this role would get Development rights on webMethods.io Integration to create and manage integrations, connections, etc. Use this role when you want to only provide access for webMethods.io Integration. You can control access for users with custom roles also on webMethods.io Integration - https://docs.webmethods.io/integration/accounts_settings/tenant_settings/#co-tenantset_roles.

webMethodsioB2B-User: When a user is associated with this role would get Administrator rights on webMethods.io B2B. Use this role when you want to only provide access for webMethods.io B2B. webMethods.io B2B offers default roles as Administrator, Developer and Regular user. For more details, please see - https://docs.webmethods.io/b2b/webmethods_io_b2b_online_help/chapter12/#ta-assigning_user_roles.
CloudContainer-User: When a user is associated with this role would get Readonly rights (Regular User Access Profile) on Cloud Container. Cloud Container allows to create custom Access Profiles to define functional permissions. Use this role when you want to only provide access for Cloud Container. For more details, please see - https://documentation.softwareag.com/cloudcontainer/settings/settings/#co-access_profiles.

APIGateway-User: When a user is associated with this role would get Development rights API Gateway. Use this role when you want to only provide access for API Gateway. Use API Gateway teams feature for defining the access for individual users - https://tech.forums.softwareag.com/t/teams-in-api-gateway/237355.
APIPortal-User: When a user is associated with this role would get Development rights API Gateway. Use this role when you want to only provide access for API Gateway. For more details on User Management please see - https://docs.webmethods.io/api/webmethods_api_portal/chapter7a/#gsc.tab=0.