Training Azure AD - User, Groups and Roles Administration
As a prerequisite we need to have some xAPPnow groups created. The following groups have to be predefined in the Active Directory for the xAPPnow Low Code Platform:
-
xAPPnow Active Directory Root Group
We need one AD root group representing the xAPPnow Low Code Platform. This group is only necessary for the Active Directory configuration and not used in Modeling Studio or User Portal.
-
xAPPnow Low Code Platform
-
Environment Groups
Environment groups provide the basis access to an xAPPnow runtime environment. For each runtime environment a specific Active Directory Group has to be assigned as a subgroup of the group “xAPPnow Low Code Platform”. Environment groups are only necessary for the Active Directory configuration and not used in Modeling Studio or User Portal.
-
xAPPnow Development
-
xAPPnow Test
-
xAPPnow Production
-
xAPPnow Domain Groups
To provide access to an xAPPnow domain we have to define a domain group, which must have a specific format to retrieve the domain name from the group.
-
xAPPnow Domain <name>
The domain group has to be assigned as a subgroup of each environment group.
-
Administrator Roles and Responsibilities Groups
The following Modeling Studio and User Portal roles will be defined as Active Directory groups. To check the list of the related major tasks see Training Administration Roles and Groups for xAPPnow Low Code Platform.
-
xAPPnow Platform Administrator
-
xAPPnow Modeling Studio System Administrator
-
xAPPnow Modeling Studio Domain Administrator
-
xAPPnow User Portal System Administrator
-
xAPPnow User Portal Domain Administrator
-
xAPPnow External System Administrator
-
xAPPnow Application Administrator
-
Modeling Studio User Role and Permission Groups
-
xAPPnow Developer
-
User Portal User Roles and Permission Groups
The following AD groups will represent the User Portal User roles and its corresponding permissions, which allows the access to User Portal menus and its related functionalities.
-
xAPPnow External User
-
xAPPnow Internal User
-
xAPPnow Case Management
-
xAPPnow Case Definition
-
xAPPnow Issue Management
-
xAPPnow Business Analysis
-
xAPPnow Processes
-
xAPPnow Developer (= same AD group as for Modeling Studio)
-
Publish User Roles
A specific AD Group has to be defined to publish domain specific and into all domains.
-
xAPPnow Publish Domain
-
xAPPnow Publish Platform
-
Client specific Groups and Roles
The client can specify whatever number of AD roles and/or AD groups, which represent corresponding Camunda groups for internal user as well as AD roles and/or AD groups, which represent external user.
Sample:
-
Clerk
-
Management
