UAA Admin user required to manage roles??
Closed this issue · 7 comments
I find the line To manage users, organizations, and roles with the cf CLI, you must log in with UAA Administrator user credentials. confusing/misleading, and just received a feature request for the cf CLI to do make role management possible by Org Managers. It already is!
I'm not sure what "UAA Administrator user credentials" means - did a search and this is the only page that uses "UAA Administrator". Is that different from the CF operator (the "admin")?
Assuming it is the same, note that if the feature flag set_roles_by_username is enabled, Org Managers can assign roles to (existing) users in their org. Even Space Managers can assign (space) roles to users in their space.
We have created an issue in Pivotal Tracker to manage this:
https://www.pivotaltracker.com/story/show/137155851
The labels on this github issue will be updated when the story is started.
Hey @dkoper thanks for this! To clarify, "UAA Administrator user credentials" in this context means that you must obtain the credentials from navigating to the Elastic Runtime tile, clicking the Credentials tab, scrolling down to the UAA section, and clicking Link to Credential next to Admin Credentials. We can refer to these as the "admin" or "operator" credentials if that's more accurate, and we can also include a more complete explanation of how to find them.
We will also document the feature flag set_roles_by_username. Can you give us an example of how to set that flag on the command line?
Thanks!
@bentarnoff tile? I was referring to the OSS documentation.
I think feature flags are documented already somewhere?
host@cloud-cf:~/workspace$ ./cf enable-feature-flag set_roles_by_username
Setting status of set_roles_by_username as admin...
OK
Feature set_roles_by_username Enabled.
Sorry about that @dkoper! And thanks for the info about feature flags. We'll update this topic.
Hey @dkoper please take a look at the revised topic on our staging site and let us know if you have any feedback: https://docs-cloudfoundry-staging.cfapps.io/adminguide/cli-user-management.html
@bentarnoff Looks good!
Great, thanks!