Introduction

This section covers an introduction to the provisioning capabilities of Velo,
It shows how to create a User, Role and how to assign the Role to the newly created User,

This section assumes you already familiar with the User, Role and Resource objects, and that you already created one resource that is ready to use,

If you are not familiar with the objects above, please read for more information VELO:Overview. If you did not create a resource yet, please check out [Connecting Active Directory].

Creating a user

In order to provision a new account to a resource we must create a user,
Creating a user can be done via several ways, but for the fast quick start we will create the user manually from Velo front-end:

1. Login into the administrative front-end
2. Choose from the top menu Identities->User List
3. Push the Create User button.
4. Fill in all the minimum required attributes such as First Name and Last Name and press Next.
5. On the new screen, fill up the User Name with your favorite user name (you can leave all other fields as they are for now) and press Save

Creating basic Role

Provisioning always done via roles, in this section will create a Role and assign ta resource to the Role.

1. Login into the administrative front-end
2. Choose from the top menu Access->Roles
3. Push the Create Role button.
4. In the displayed form fill up the required fields (Name and Description).
5. Below, under the Resources Associations section, choose the selected resource we would like to provision to and press Save
6. You can see a summary of the newly created Role.
7. Press Done

Assigning Role to User

So lets see what we have covered,
We have a new User, filled up with some attributes and a Role that holds a reference to a resources.

Assigning the Role to a User will provision a new account to the resource the Role references.

1. Login into the administrative front-end
2. Choose from the top menu Identities->User List
3. Search the user and select it
4. Choose the Roles tab from the User's Tabs
5. Press the Modify Roles Assignment button below
6. On the first time, the new displayed interface might look little bit complex, but it is an efficient interface which can easily let you manage User's roles assignment.
From the 'Role Search Result' choose the created Role by pressing the green '+' icon.
You can see how this role was inserted into the 'Roles to be associated' rectangle.
7. Press the Modify Roles Assignment button below and OK on the popped up warning message.
8. A successfully message should be displayed and a new account should be created on the resource that the assigned Role references.

Revoking assigned Role from a User

Revoking a role is just the opposite operation from the Role Assignment process above,
Repeat the same steps but this time revoke the role instead of inserting one,

This operation will de-provision the account from the resource.