Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
  • Loading branch information
kalsky committed Apr 14, 2024
2 parents 4440b78 + 912b96a commit aeba944
Show file tree
Hide file tree
Showing 14 changed files with 41 additions and 42 deletions.
2 changes: 1 addition & 1 deletion docs/admin/administrative-operations-overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -45,5 +45,5 @@ Associating groups with domains allows the group's user access to domain resourc
- [CloudShell Deployment Overview](../admin/setting-up-cloudshell/cloudshell-deployment-overview.md)
- [Inventory Operations](../admin/setting-up-cloudshell/inventory-operations/)
- [CloudShell Identity Management](../admin/cloudshell-identity-management/)
- [](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/ID-Mngmt.htm)[CloudShell Manage Dashboard](https://help.quali.com/Online%20Help/0.0/Portal/Content/CSP/MNG/Mng-CS-Cat.htm)
- [CloudShell Manage Dashboard](https://help.quali.com/Online%20Help/0.0/Portal/Content/CSP/MNG/Mng-CS-Cat.htm)
- [CloudShell Execution Server Configurations](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Stp-Exctn-Srvr.htm)
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ The **Properties** page displays the current domain settings: the domain name, d
**To configure settings in the Properties page:**

1. To change a domain's name and description, click the **Edit** button next to the **Domain Name** field.
2. To archive the domain, click the **Archive** button next to the **Domain Name** field. If the domain is currently archived, click the **Archive** button to restore the domain. For additional information, see [Archiving and Restoring Domains](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Arcv-n-Rstr-Dmn.htm).
2. To archive the domain, click the **Archive** button next to the **Domain Name** field. If the domain is currently archived, click the **Archive** button to restore the domain. For additional information, see [Archiving and Restoring Domains](../../../admin/cloudshell-identity-management/cloudshell-domains/archiving-and-restoring-domains.md).
3. The domain's **Topologies Folder** arranges all blueprints created within that domain. To change the domain's topologies folder, click the **Change** button next to the **Topologies Folder** field.
:::tip
Clicking the Clear button next to the Topologies Folder field will remove the blueprints folder and prevent users from adding blueprints to the domain.
Expand All @@ -43,11 +43,11 @@ The **Properties** page displays the current domain settings: the domain name, d
:::
6. The **Resources** field displays the number of resources associated with the domain. Click the **Add Resource** button to find additional resources.
7. The **Reservations** field shows a real time summary of the domain's activity.
8. To add or remove groups from the domain, click the **Groups** tab. The **Groups** tab lists all groups associated with the domain. The **View Only** field is checked for any group with view-only access to the domain. To manage groups and their permission levels, see [Managing CloudShell Groups](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Add-Grp.htm).
8. To add or remove groups from the domain, click the **Groups** tab. The **Groups** tab lists all groups associated with the domain. The **View Only** field is checked for any group with view-only access to the domain. To manage groups and their permission levels, see [Managing CloudShell Groups](../../../admin/cloudshell-identity-management/managing-users/managing-cloudshell-groups.md).
:::note
You can also associate a group with a domain via the **Domains** area in the **Groups** tab.
:::
9. Click the **Topologies** tab to add or remove blueprints. The **Topologies** tab lists all blueprints associated with the domain. When you add a blueprint to a domain, the blueprint's resources, Apps and services are added as well. For additional information, see [Adding resources to a domain](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Add-dmn-rsrc.htm#Adding).
9. Click the **Topologies** tab to add or remove blueprints. The **Topologies** tab lists all blueprints associated with the domain. When you add a blueprint to a domain, the blueprint's resources, Apps and services are added as well. For additional information, see [Adding resources to a domain](../../../admin/cloudshell-identity-management/cloudshell-domains/addingremoving-resources-from-a-domain.md#adding-resources-to-a-domain).

[![](/Images/Admin-Guide/User-Management/The-Domain-window_2_thumb_0_48.png)](https://help.quali.com/Online%20Help/0.0/Portal/Content/Images/Admin%20Guide/User%20Management/The%20Domain%20window_2.png)
:::note
Expand All @@ -56,7 +56,7 @@ The **Properties** page displays the current domain settings: the domain name, d

## Resources page

The **Resources** page lists all resources associated with the domain. Here you can search for and add resources to domains. For additional information, see [Searching for resources to add to a domain](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Add-dmn-rsrc.htm#Searchin).
The **Resources** page lists all resources associated with the domain. Here you can search for and add resources to domains. For additional information, see [Searching for resources to add to a domain](../../../admin/cloudshell-identity-management/cloudshell-domains/addingremoving-resources-from-a-domain.md#searching-for-resources-to-add-to-a-domain).

[![](/Images/Admin-Guide/User-Management/The-Domain-window_3_thumb_0_48.png)](https://help.quali.com/Online%20Help/0.0/Portal/Content/Images/Admin%20Guide/User%20Management/The%20Domain%20window_3.png)
:::note
Expand Down
7 changes: 3 additions & 4 deletions docs/admin/cloudshell-identity-management/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,6 @@ Additional permissions like creating CloudShell blueprints and extending externa

## Related Topics

- [Managing Users](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Usrs-n-grps.htm?TocPath=CloudShell%20Administration|CloudShell%20Identity%20Management|Managing%20Users|_____0)
- [CloudShell Domains](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Wrk-wth-Dmn.htm?TocPath=CloudShell%20Administration|CloudShell%20Identity%20Management|CloudShell%20Domains|_____0)
- [Managing CloudShell Permissions](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Mng-Prms.htm?TocPath=CloudShell%20Administration|CloudShell%20Identity%20Management|Managing%20CloudShell%20Permissions|_____0)
- [Access Control and Authentication](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Accss-Cntrl-Auth.htm?TocPath=CloudShell%20Administration|CloudShell%20Identity%20Management|Access%20Control%20and%20Authentication|_____0)
- [Managing Users](../../admin/cloudshell-identity-management/managing-users/index.md)
- [Managing CloudShell Permissions](../../admin/cloudshell-identity-management/managing-cloudshell-permissions/index.md)
- [Access Control and Authentication](../../admin/cloudshell-identity-management/access-control-and-authentication/index.md)
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ sidebar_position: 1
<p>This article lists the different actions each user type can perform in CloudShell. In the tables below, supported actions are indicated in <span style={{ backgroundColor: 'rgba(0, 128, 0, 0.5)', color: 'black' }}>green</span> while unsupported actions are <span style={{ backgroundColor: 'rgba(255, 0, 0, 0.5)', color: 'black' }}>red</span>.</p>


For more information about group roles and access levels, see [Managing CloudShell Groups](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Add-Grp.htm).
For more information about group roles and access levels, see [Managing CloudShell Groups](../managing-users/managing-cloudshell-groups.md).
:::note
In the tables below, "View Only access" indicates the permissible actions for users who are members of a group that is defined as **View Only** in the domain. For more information, see [Associating groups with a domain](../managing-users/managing-cloudshell-groups.md#associating-groups-with-a-domain).
:::
Expand All @@ -22,7 +22,7 @@ For brevity, the "Edit" action indicates the user type can create, edit and dele

\*\* indicates that the option can be hidden from non-admin users with the `BlockPackageExportForNonAdmins` key

\*\*\* If the `<add key="OnlyAllowNewEnvironmentsFromTemplates" value="true"/>` key is defined on the server , users can only create blueprints from a template but not from scratch (empty blueprints). However, if there are no templates assigned to the domain, users of that domain cannot create new blueprints. For details, see [The + Create Blueprint Link is Missing From the Blueprint Catalog](https://help.quali.com/Online%20Help/0.0/Portal/Content/Troubleshooting/Create-blueprint-link-is%20missing.htm).
\*\*\* If the `<add key="OnlyAllowNewEnvironmentsFromTemplates" value="true"/>` key is defined on the server , users can only create blueprints from a template but not from scratch (empty blueprints). However, if there are no templates assigned to the domain, users of that domain cannot create new blueprints. For details, see [The + Create Blueprint Link is Missing From the Blueprint Catalog](../../../troubleshooting/cloudshell-portal/the-create-blueprint-link-is-missing-from-the-blueprint-catalog.md).

<table>
<thead>
Expand Down Expand Up @@ -712,7 +712,7 @@ For brevity, the "Edit" action indicates the user type can both view and edit th
<td style={{ backgroundColor: 'rgba(255, 0, 0, 0.5)' }}>x</td>
</tr>
<tr>
<td style={{ fontWeight: 'bold' }}>Edit Shells (See [Shells](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Prmsn.htm?Highlight=CloudShell%20User%20Permission%20Levels%20(RBAC)#Shells) below)</td>
<td style={{ fontWeight: 'bold' }}>Edit Shells (See [Shells](../../../admin/cloudshell-identity-management/managing-cloudshell-permissions/cloudshell-user-permission-levels-rbac.md#shells) below)</td>
<td style={{ backgroundColor: 'rgba(0, 128, 0, 0.5)' }}>v</td>
<td style={{ backgroundColor: 'rgba(255, 0, 0, 0.5)' }}>x</td>
<td style={{ backgroundColor: 'rgba(255, 0, 0, 0.5)' }}>x</td>
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Managing Users

User permissions in CloudShell are based on the user's group memberships. The System Administrator grants user permissions by adding users to groups. System administrators can be defined by other system administrators when creating a user profile, as explained in [Managing CloudShell Users](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Add-Usr.htm).
User permissions in CloudShell are based on the user's group memberships. The System Administrator grants user permissions by adding users to groups. System administrators can be defined by other system administrators when creating a user profile, as explained in [Managing CloudShell Users](../../../admin/cloudshell-identity-management/managing-users/managing-cloudshell-users.md).

Each group in the system is assigned with a group role. The group role defines the permissions for all the users added to the group.

Expand All @@ -10,4 +10,4 @@ The available group roles are:
- Regular users – default role for new group.
- External users

For details about each role, see [Managing CloudShell Groups](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Add-Grp.htm).
For details about each role, see [Managing CloudShell Groups](../../../admin/cloudshell-identity-management/managing-users/managing-cloudshell-groups.md).
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ There are various ways to define CloudShell groups:
- **Regular users** are the default role for new groups. Regular users can access and use public blueprints in their domain and become owners of blueprints, which allows them to modify the blueprint’s properties and elements.
- **External users** are very limited users that can view blueprints but not use them. They can view and export public blueprint diagrams but cannot create or modify blueprints and sandboxes. Using the `ExternalUserHasExtendedPermissions` configuration key, external user permissions can be extended to allow them to see blueprint resource structures and commands and reserve blueprints.
:::note
System administrators are defined per user in the user's profile. For additional information, see [Managing CloudShell Users](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Add-Usr.htm).
System administrators are defined per user in the user's profile. For additional information, see [Managing CloudShell Users](../../../admin/cloudshell-identity-management/managing-users/managing-cloudshell-users.md).
:::

![](/Images/Admin-Guide/User-Management/NewGroupWindow1.png)
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ The following user management options are performed in the **Users** tab in the

:::note Notes:
- The user can change their email in CloudShell Portal.
- To enable email notifications, [SMTP mail configuration](https://help.quali.com/Online%20Help/0.0/Portal/Content/IG/Configure%20CloudShell%20Products/admn-cnfgr-stgs.htm#SMTP) is required.
- To enable email notifications, [SMTP mail configuration](../../../install-configure/cloudshell-suite/configure-products/admin-config-settings.md#smtp-mail-configuration) is required.
:::
- **Administrator**: Select to grant the user System Administrator permissions.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ sidebar_position: 3

# Updating User Settings

You can modify the user's email and change the user's status in **Resource Manager Client**, and, if enabled, from **CloudShell Portal**. This procedure explains how to do so in Resource Manager Client. For information about modifying user settings in CloudShell Portal, see [Logging into CloudShell](https://help.quali.com/Online%20Help/0.0/Portal/Content/CSP/Login.htm).
You can modify the user's email and change the user's status in **Resource Manager Client**, and, if enabled, from **CloudShell Portal**. This procedure explains how to do so in Resource Manager Client. For information about modifying user settings in CloudShell Portal, see [Logging into CloudShell](../../../portal/overview/logging-in.md).

**To edit an existing user:**

Expand Down
10 changes: 5 additions & 5 deletions docs/admin/cloudshell-manage-dashboard/blueprint-templates.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,9 +10,9 @@ Blueprint templates enable your organization to define a uniform standard for ne

Blueprint templates can be viewed and created by system and domain administrators. Domain administrators can view and create templates for their permitted domains only.

CloudShell includes a default out-of-the-box blueprint template, **CloudShell Sandbox Template**, on which all new blueprints are based. You can create additional blueprint templates, according to your needs. For more information, see [Creating a new blueprint template](https://help.quali.com/Online%20Help/0.0/Portal/Content/CSP/MNG/Wrk-wth-Blprnt-Tmplt.htm?Highlight=Blueprint%20Templates#Creating).
CloudShell includes a default out-of-the-box blueprint template, **CloudShell Sandbox Template**, on which all new blueprints are based. You can create additional blueprint templates, according to your needs. For more information, see [Creating a new blueprint template](../../admin/cloudshell-manage-dashboard/blueprint-templates.md#creating-a-new-blueprint-template).

You can enable users to create empty blueprints that are not based on a template and do not include orchestration scripts. For more information, see [Allowing users to create new empty blueprints](https://help.quali.com/Online%20Help/0.0/Portal/Content/CSP/MNG/Wrk-wth-Blprnt-Tmplt.htm?Highlight=Blueprint%20Templates#Allowing).
You can enable users to create empty blueprints that are not based on a template and do not include orchestration scripts. For more information, see [Allowing users to create new empty blueprints](../../admin/cloudshell-manage-dashboard/blueprint-templates.md#allowing-users-to-create-new-empty-blueprints).

## CloudShell Sandbox Template

Expand Down Expand Up @@ -97,7 +97,7 @@ The **CloudShell Sandbox Template** is provided by default and is updated by Clo

4. Update the properties and click **Save**.

All non-administrator users can now create blueprints from the templates(s) you created. For step-by-step instructions on how to create a blueprint from a template, see the help topic: [Creating a blueprint from a template](https://help.quali.com/Online%20Help/0.0/Portal/Content/CSP/LAB-MNG/Crt-Blprnt/Blprnt-New.htm#Creating).
All non-administrator users can now create blueprints from the templates(s) you created. For step-by-step instructions on how to create a blueprint from a template, see the help topic: [Creating a blueprint from a template](../../portal/blueprints/creating-blueprints/create-blueprint.md#creating-a-blueprint-from-a-template).
:::note
The owner of the blueprint template is the administrator who created the template.
:::
Expand All @@ -118,13 +118,13 @@ Changes you perform on the diagram of the template are saved automatically. 
For administrators, the blueprint template is listed in the **Manage** dashboard in the **Blueprint Templates** page. 
For users, the blueprint template is now available for creating a new blueprint based on the new template.

All non-administrator users can now create blueprints from the templates(s) you created. For step-by-step instructions on how to create a blueprint from a template, see the help topic: [Creating a blueprint from a template](https://help.quali.com/Online%20Help/0.0/Portal/Content/CSP/LAB-MNG/Crt-Blprnt/Blprnt-New.htm#Creating).
All non-administrator users can now create blueprints from the templates(s) you created. For step-by-step instructions on how to create a blueprint from a template, see the help topic: [Creating a blueprint from a template](../../portal/blueprints/creating-blueprints/create-blueprint.md#creating-a-blueprint-from-a-template).
:::note
The owner of the blueprint template is the administrator who created the template.
:::
### Allowing users to create new empty blueprints

By default, when creating a new blueprint, it will be based on the CloudShell Sandbox Template. If multiple templates were defined, users must select a template on which to base the blueprint. However, the Admin can enable users to create blueprints that are not based on a template. For more information, see [Enabling the creation of empty blueprints](https://help.quali.com/Online%20Help/0.0/Portal/Content/Admn/Wrk-wth-Cnfg-Ky.htm#Enabling)
By default, when creating a new blueprint, it will be based on the CloudShell Sandbox Template. If multiple templates were defined, users must select a template on which to base the blueprint. However, the Admin can enable users to create blueprints that are not based on a template. For more information, see [Enabling the creation of empty blueprints](../../admin/setting-up-cloudshell/cloudshell-configuration-options/advanced-cloudshell-customizations.md#enabling-the-creation-of-empty-blueprints)
:::note
Changes to the configuration file affect the entire system.
:::
Expand Down
Loading

0 comments on commit aeba944

Please sign in to comment.