Creation of User, Group and associated mappings using keycloak

Products

• VMware Telco Cloud Operations

Issue/Introduction

This article provides information about managing VMware Telco Cloud Operations (TCOPs) users and user groups using Keycloak.

Environment

1.x

Resolution

User Management

Searching For Users

1. If you need to manage a specific user, click Users in the left menu bar.

2. A list of all users will be displayed on this page.
3. In the search box, type in a full name, last name, or email address you want to search for in the user database.
4. The query will list all users that match your criteria. The View all users button will list every user in the system.

Creating New Users

1. To create a user, click Users in the left menu bar. This menu option brings you to the user list page.
2. On the right of the empty user list, click Add User to start creating your new user.

3. Enter the Username and click save. The management page will be displayed for your new user.

Deleting Users
To delete a Users:

1. Click Users in the left menu bar. This menu option brings you to the user list page.
2. Click View all users or search to find the user you intend to delete.
3. In the list of users, click Delete next to the user you want to remove. 
4. Click Delete in the confirmation box to confirm.

User Credentials
When viewing a user, go to the Credentials tab to manage a user’s credentials.
To create a password for a user:

1. Type a new password in the Password and Password Confirmation field.
2. Click Set Password to save the changes. 

User Group

Groups in Keycloak allow you to manage a common set of attributes and role mappings for a set of users. Users can be members of zero or more groups. Users inherit the attributes and role mappings assigned to each group. To manage groups go to the Groups left menu item.


Enter a group name in the Create Group screen and click Save. You will be navigated to the individual group management page.



Mapping User to a User Group

To map a user to a group:

1. Go to the user detail page and click on the Groups tab.
2. Select a group from the Available Groups tree and click Join to map the user to a group. Use the same procedure to remove a group. In the below illustration, we have mapped the user demouser1  to the demotenant1  group.

If you go back to the detail page for that group and select the Membership tab, demouser1 is now displayed in the demotenant1 group.

Additional Information

• For more information on User Management in VMware Telco Cloud Operations, see VMware Telco Cloud Operations Configuration Guide - Managing Users and Access Control
• For more information on User Management in keycloak, see Keycloak User Management
• For more information on Groups in keycloak, see Keycloak Group
• For more information on regarding keycloak, see Keycloak Server Administration Guide