Document Actions
3.2.
Using the Client Membership Service
Up one level
Membership Service
The membership service makes it easier to manage groups of users and resources. Instead of giving every user access to every resource (n*m rules), given every user access to the group, and group members access to every resource (n+m rules). The Managing users and suppliers section of the client manual explains how this service is used, while this guide only covers how to set it up.
Before the membership service can be used, at least one person must be given the manager role, which permits them to create new membership groups.
To give someone the manager role on the service:
-
Go to the main page (https://<servername>:8443/gria-client-mgt).
-
Click on the Membership Service link.
-
In the access control table at the bottom of the page, choose Subject DN is ... and click Add:
-
Upload the certificate for the manager you wish to add into the form. Grant them the manager role. See the PBAC administrator's guide for more details about setting access control rules.
Managers can now create new membership groups, to which they can add users, as described in Managing users and suppliers.
