ADMIN role


The default MANAGER user can get ADMIN privileges in one of the following ways:

  • The Portworx administrator assigns one or more MANAGER users as the organization ADMIN who can then
  • The organization ADMIN can provide ADMIN privileges to any MANAGER user. For more information about editing the user role, refer to the Edit user role section.

The following sections explain tasks that you can perform using the ADMIN privileges:

Manage users

ADMIN users can:

  • invite other users
  • modify a user role
  • delete user invites

Invite users

Using the administrator privileges, you can invite users to access the PX-BaaS services:

  1. In the Product Catalog page, select the Profile icon -> Manage Users.

    Manage Users Option

  2. In the User List page, select Invite Users.

    Invite users icon

  3. (Optional) In the User Name box, you can enter the name of the user you want to invite.

    The User Invitation List page that appears displays all invited users.

  4. In the Email box, enter the email address of the user who you want to invite and select the Invite User button:

    User Invitation List

    The invited user gets the User Invitation email notification from Portworx. When the user clicks the View the Invitation button in the notification email, the PX-BaaS sign in page appears. For more information about signing in to the portal, refer to the Access PX-BaaS section.

Delete and resend invitation

If you invited a user by mistake or entered the wrong email address, then you can select the Remove this Invitation button in the User Invitation List page to delete the invitation.

If an invited user has not received the invitation notification email, then you can select the Resend Invitation Mail icon to send the invitation email again.

Delete Invitation

Invite users using PX-Backup Security

You can also invite users to access PX-BaaS services and assign them the PX-Backup Security roles.

  1. In the PX-BaaS -> Portworx Services page, click on a service name:

    Click on Service Name

    For more information about adding a service, refer to the Add Portworx service section.

  2. In the PX-Backup clusters page, select the Profile icon -> PX-Backup Security.

  3. In the PX-Backup Security -> Role Mapping page, select Invite User:

    RBAC Add Option

  4. In the Invite Users window that appears -> Role dropdown list, select a PX-Backup Security role that you want to assign to the user. For more information about PX-Backup Security roles, refer to PX-Backup Security introduction topic.

  5. In the User Emails box, enter valid email address(es) of one or more users that you want to invite.

    Enter user email

    Note: You can enter a maximum of twenty email IDs in the Invite Users window.
  6. Select Submit.

    The invited users receive a notification email from Portworx to confirm and activate the email account. When users click the Start using Portworx button in the notification email, Portworx authenticates the email invite and redirects to the PX-BaaS Product Catalog page.

Note: You cannot invite user Groups, from the PX-Backup Security -> Role Mapping page, to access the PX-BaaS portal.

Edit user role

The ADMIN user includes privileges to edit an existing user role. To edit a user role:

  1. From the User List page, select the ellipses button in a user row -> Edit User.

    Edit User

  2. In the user profile page -> User Management section -> Role dropdown list, select an unassigned role. For example, select MANAGER if the current user role is ADMIN:

    Edit User Icons

  3. Select Update.

Setup OIDC access

If you are an ADMIN user, then you can set up OIDC access credentials in PX-BaaS. Using these access credentials, users can sign in to PX-BaaS and use its services.

To setup OIDC access:

  1. In any of the PX-BaaS portal pages, select the Profile icon -> Setup OIDC:

    Setup OIDC Option

  2. In the Setup OIDC page, enter valid values in the Endpoint, Client ID, and Client Secret boxes:

    Setup OIDC Access

    Note: The Redirect URI field displays the PX-BaaS portal URL with a domain name. The Redirect URI should be registered as application or client registration in your SSO or OIDC provider.
  3. Select Save.

  4. Share the domain name with users who want to sign in to the PX-BaaS portal.

    For example, in the above screenshot, the domain name is demotest2.com. Users with the demotest2.com domain name can sign up for PX-BaaS services.


Last edited: Monday, Jun 6, 2022