Access management workflow

CONNECT account administrators are responsible for access management—the process of adding users to your account and managing their permissions. Complete the tasks below to onboard CONNECT users and assign them permissions for account services and resources.

1. Create users

   Integrate users from your identity provider (IdP) into your account as CONNECT users. Completing this step lets users authenticate using their existing IdP credentials.

   For more information, see Users.

2. Create groups

   Grouping users with similar roles or job descriptions is essential for efficient management and administration of permissions. By creating groups, you can apply permissions and control access for multiple users simultaneously, simplifying user management tasks.

   For more information, see Groups.

3. (Optional) Create role definitions

   By default, CONNECT includes system roles that can be assigned to users to manage their access to services and resources. These system roles accommodate most use cases, and using them is encouraged to minimize complexity and administrative overhead.

   However, in use cases here the default system roles are insufficient, you can create your own to customize permissions for roles unique to your organization or application environment. By defining custom roles, you can granularly control user access to services, resources, and actions based on their roles or job descriptions.

   For more information about role, see the following topics:

   • Roles

   • Role definitions

4. Assign roles

   Role assignments grant specific permissions to users or groups, allowing them to access services, resources, and actions according to a role definition included in the assignment. By assigning roles, you can control and manage user access at a granular level, ensuring that users have the necessary permissions to perform their tasks effectively.

   For more information, see Role assignments.