ADMIN role

The default MANAGER user can get ADMIN privileges in one of the following ways:

• The Portworx administrator assigns one or more MANAGER users as the organization ADMIN who can then
• The organization ADMIN can provide ADMIN privileges to any MANAGER user. For more information about editing the user role, refer to the Edit user role section.

The following sections explain tasks that you can perform using the ADMIN privileges:

Manage users

ADMIN users can:

• invite other users
• modify a user role
• delete user invites

Invite users

Using the administrator privileges, you can invite users to access the Portworx BaaS services:

1. In the Product Catalog page, select the Profile icon -> Manage Users.

   

2. In the User List page, select Invite Users.

   

3. (Optional) In the User Name box, you can enter the name of the user you want to invite.

   The User Invitation List page that appears displays all invited users.

4. In the Email box, enter the email address of the user who you want to invite and select the Invite User button:

   

   The invited user gets the User Invitation email notification from Portworx. When the user clicks the View the Invitation button in the notification email, the Portworx-BaaS sign in page appears. For more information about signing in to the portal, refer to the Access Portworx BaaS section.

Delete and resend invitation

If you invited a user by mistake or entered the wrong email address, then you can select the Remove this Invitation button in the User Invitation List page to delete the invitation.

If an invited user has not received the invitation notification email, then you can select the Resend Invitation Mail icon to send the invitation email again.

Invite users using Portworx-Backup Security

You can also invite users to access Portworx BaaS services and assign them the Portworx Backup Security roles.

1. In the Portworx BaaS -> Portworx Services page, click on a service name:

   

   For more information about adding a service, refer to the Add Portworx service section.

2. In the Portworx Backup clusters page, select the Profile icon -> Portworx Backup Security.

3. In the Portworx Backup Security -> Role Mapping page, select Invite User:

   

4. In the Invite Users window that appears -> Role dropdown list, select a Portworx Backup Security role that you want to assign to the user. For more information about Portworx Backup Security roles, refer to Portworx Backup Security introduction topic.

5. In the User Emails box, enter valid email address(es) of one or more users that you want to invite.

   

   Note: You can enter a maximum of twenty email IDs in the Invite Users window.

6. Select Submit.

   The invited users receive a notification email from Portworx to confirm and activate the email account. When users click the Start using Portworx button in the notification email, Portworx authenticates the email invite and redirects to the Portworx BaaS Product Catalog page.

Edit user role

The ADMIN user includes privileges to edit an existing user role. To edit a user role:

1. From the User List page, select the ellipses button in a user row -> Edit User.

   

2. In the user profile page -> User Management section -> Role dropdown list, select an unassigned role. For example, select MANAGER if the current user role is ADMIN:

   

3. Select Update.

Setup OIDC access

If you are an ADMIN user, then you can set up OIDC access credentials in Portworx BaaS. Using these access credentials, users can sign in to Portworx BaaS and use its services.

To setup OIDC access:

1. In any of the Portworx BaaS portal pages, select the Profile icon -> Setup OIDC:

   

2. In the Setup OIDC page, enter valid values in the Endpoint, Client ID, and Client Secret boxes:

   

   Note: The Redirect URI field displays the Portworx BaaS portal URL with a domain name. The Redirect URI should be registered as application or client registration in your SSO or OIDC provider.

3. Select Save.

4. Share the domain name with users who want to sign in to the Portworx-BaaS portal.

   For example, in the above screenshot, the domain name is demotest2.com. Users with the demotest2.com domain name can sign up for Portworx BaaS services.