Members

A member is someone with a membership in one or more Orchestrator organizations.

Overview

To interact with the Platform Orchestrator you need to be registered as an Orchestrator user and be a member in one or more organizations.

Users with an Admin role in an organization can manage organization membership and permissions through RBAC. Installation administrators manage user identities in Keycloak.

Managing users

Creating users

Create local users in the Keycloak administration console for the platform-orchestrator realm, or configure an external identity provider for SSO. The user signs in through the Platform Orchestrator console and selects their organization.

Manage user roles in an organization

Organization Admins can modify roles of existing users in an organization.

However, users cannot modify their own roles.

  1. Select Members from the navigation menu
  2. Find the user you want to modify
  3. Select the three dots icon
  4. Select Manage roles
  5. Select a new RBAC role for the user
  6. Select Update to confirm the role change

Not yet supported by the Platform Orchestrator CLI.

Removing users from an organization

Users can be removed from an organization by organization Admins. At least one Admin must remain in the organization.

However, users cannot remove themselves.

  1. Select Members from the navigation menu
  2. Find the user you want to remove
  3. Select the three dots icon
  4. Select Remove user
  5. Confirm the removal in the dialog

Not yet supported by the Platform Orchestrator CLI.

RBAC

Service users