User Management / Identity Manager

The BPC offers integrated user management. The specific scope of functions is defined by the identity provider (IdP) in use and the current user’s permissions.

user management

The functions are also available via API. See Identity Management API.

Functions

The following sections describe the individual functions and the required permissions (in BPC) needed to use them in more detail. If multiple required permissions are listed, only at least one of them is required—not all of them together.

You may need to configure additional permissions in your identity provider. This is particularly necessary for Keycloak. See Keycloak permissions.

Listing users of the identity provider

Lists all users stored in the identity provider. If available, the name and email address are displayed.

Required BPC permissions

  • Role bpcadmin,

  • Role IDENTITY_MANAGER_ADMIN,

  • Right IDENTITY_MANAGER_USERS_READ

Displaying a user’s permissions

Displays all organizations, roles, and rights for a user when that user is selected from the list of users.

Required BPC Permissions

  • Role bpcadmin,

  • Role IDENTITY_MANAGER_ADMIN,

  • Permission IDENTITY_MANAGER_USER_ORGANISATIONS_READ,

  • Permission IDENTITY_MANAGER_USER_ROLES_READ,

  • Permission IDENTITY_MANAGER_USER_RIGHTS_READ

Creating New Users

This function allows you to create new users in the Identity Provider*.*

Required BPC Permissions

  • Role bpcadmin,

  • Role IDENTITY_MANAGER_ADMIN,

  • Permission IDENTITY_MANAGER_USERS_ADD

Editing User Data

Edit user data such as name and email.

Required BPC Permissions

  • Role bpcadmin,

  • Role IDENTITY_MANAGER_ADMIN,

  • Permission IDENTITY_MANAGER_USERS_UPDATE

Set Password

Sets a user’s password.

Required BPC Permissions

  • Role bpcadmin,

  • Role IDENTITY_MANAGER_ADMIN,

  • Permission IDENTITY_MANAGER_USERS_UPDATE

Delete User

Deletes a user from the Identity Provider.

Required BPC permissions

  • Role bpcadmin,

  • Role IDENTITY_MANAGER_ADMIN,

  • Permission IDENTITY_MANAGER_USERS_UPDATE

Impersonate a user

Impersonates another user in the system. You are then logged into BPC with the permissions and identity of the other user.

See also Impersonating Users with Keycloak.

Required BPC permissions

  • Role bpcadmin,

  • Role IDENTITY_MANAGER_ADMIN,

  • Permission IDENTITY_MANAGER_USER_IMPERSONATE

Add/Remove User Permissions

This function allows you to assign or remove organizations, roles, and permissions for users.

Required BPC permissions

  • Role bpcadmin,

  • Role IDENTITY_MANAGER_ADMIN,

  • Permission IDENTITY_MANAGER_USERS_UPDATE

Keywords:
Press Esc to exit full screen
Modal image placeholder
Press Esc to exit full screen