7.3 Importing Users from LDAP

You can create users by importing information from your LDAP authentication source. You can import users as System or Organization users. After you import a user, you can assign roles to the user.

  1. On the main navigation bar, click Getting Started, then click Create Users and Groups (in the Set Up Your Cloud Environment list).

    or

    On the main navigation bar, click Organizations.

  2. If you want to import Organization users, click the Organizations tab, select the target organization for the import, click Edit to display the Edit Organization dialog box, then click Import (located above the Members list on the Users tab).

    or

    If you want to import System users, click Configuration (on the main navigation bar) to display the System Configuration dialog box, click the Users tab, click the Members tab, then click Import.

  3. Authenticate to the LDAP directory:

    1. Click the LDAP tab.

    2. In the LDAP Location section, fill in the following fields:

      Host: Specify the FQDN (fully qualified domain name) or IP address of the host machine running the LDAP server. For example, ldap.mycompany.com or 123.45.67.8.

      Port: Specify the TCP port (on the host machine) where the LDAP server is listening for LDAP connections. The standard port for non-SSL connections is 389. The standard port for SSL connections is 636.

      Use SSL: If the Cloud Manager Application Server is configured for an SSL connection to the LDAP server, select this option to enable the secure connection.

    3. In the Search Bind Account section, fill in the following fields:

      DN: Specify an account that has search rights to the directory location from which you want to import users. For example, cn=Administrator,cn=Users,dc=MyCompany,dc=com

      Password: Specify the password for the account.

      Password Confirm: Confirm the password for the account.

    4. Click Test Connection.

      If the connection is successful, the Test Status is displayed as Passed. If the connection is not successful, validate the connection information and try again.

  4. Import users:

    1. Click the Import tab.

    2. Click Add.

      When you click Add, an new import entry is added to the list. You use the fields below the list to define the entry.

    3. In the DN field, use standard LDAP notation (ou=provo,dc=netiq,dc=com) to specify the distinguished name for the target container or object, then click Validate.

      If you specify a container, all users located within the container are imported. If you only want to import one user, specify the DN of the user object.

    4. If you specified a container for import, select Users.

    5. If you specified a container for import, select Scan Tree if you want to import users located in its subcontainers.

    6. Click Import.

      The imported users are added to the Members list. Users are identified by the icon.

  5. When you have finished importing users, click OK or Save to close the dialog box.

  6. Assign roles to the users:

    1. On the main navigation bar, click Organizations.

    2. Click the Users tab, select the user to whom you want to assign roles, then click Edit.

    3. (System user only) Assign system-level roles.

      The system-level roles are Approver, Build Administrator, Catalog Manager, Cloud Administrator, and Zone Administrator. These roles can be assigned only to System users.

      1. To assign the Approver, Build Administrator, Catalog Manager, or Cloud Administrator role, click the System tab, click Add, select the desired roles, then click OK.

      2. To assign the Zone Administrator role, click the Zone tab, click Add, select the desired zone, then click OK.

    4. Assign organization-level roles.

      The organization-level roles are Approver, Build Administrator, Business Group Viewer, Business Service Owner, Organization Manager, and Sponsor. The Approver and Build Administrator roles can be assigned only to System users. The other roles can be assigned to both System users and Organization users.

      Several of the roles can be assigned at the organization, business group, or business service level. For example, you can make a user a Sponsor for a business group, in which case the user can approve requests for business services from that business group only. Or, you can make the user a Sponsor for the organization, in which case the user can approve requests for all business services in the organization.

      1. Click the Organization tab to add a role at the organization level, click the Business Group tab to add a role at the business group level, or click the Business Service tab to add a role at the business service level.

      2. Click the role that you want to assign

        For example, if you selected the Business Group tab and you want to enable the user to create business services for the business group, click Business Service Owner.

      3. Click Add, select the object (organization, business group, or business service) to which you want the role to apply, then click OK to add it to the list.

    5. When you have finished assigning roles to the user, click Save.

For more information about users and roles, see Section III, User Management.