Creating Groups in a UAA Instance

If you design your application to authorize using specific scopes, you can create groups corresponding to those scopes in UAA and assign users to those groups. When the users log into your web application, the application redirects them to UAA. If a user is in the specified group and you chose to authorize the web application with that scope, the web application gets a signed token that contains that scope.

About This Task

Predix platform services have scopes specific to each service. When you create users for these services, you can create groups corresponding to these scopes to provide permissions specific to a service. After creating groups, you can assign users to the required groups.

For example, if you use the Time Series service, you must create the timeseries.zones.<instance_id>.user and timeseries.zones.<instance_id>.ingest groups for users with data ingestion permission.

For a list of scopes for all platform services, see Authorities or Scopes Required for Platform Services.

Use the following procedure to create groups in UAA:

Procedure

  1. In the Console view, select the Space where your services are located.
  2. In the Services Instances page, select the UAA instance that you need to configure.
  3. Select the Configure Service Instance option.
  4. In the UAA Dashboard login page, specify your admin client secret and click Login.
  5. In UAA Dashboard, select the User Management tab.
    The User Management tab has two sections, Users and Groups. The Groups section displays the groups that you have created in your UAA instance.
  6. Click on the Create Group option to open the New Group form.
  7. Specify the following values in the New Group form:
    FieldDescription
    Display NameSpecify the name of the group.
    DescriptionSpecify the description of the group.