Adding users to the account and assigning roles

As an Administrator, you add the people in your organization who need access to the Data Product Hub to the IBM Cloud account and then assign them the appropriate IAM roles for their tasks.

Invite users by sending an invitation from the Users screen of the IBM Cloud account. The new users receive an email invitation to join the account. They must accept the invitation to be added to the account.

Adding users to your IBM Cloud account

You invite users to your IBM Cloud account by sending an email invitation from the Manage>Access(IAM)>Users screen in IBM Cloud. The user accepts the invitation to join the account. After the user accepts the invitation, you assign them roles (or access groups) to provide the necessary permissions to work in Data Product Hub.

You have two options for assigning IAM roles. You can assign roles to individual users or you can create access groups to expedite role assignment.

IBM account membership

Users need an IBMid to be authorized for Data Product Hub. If the invited user does not have an IBMid, it is created for them when they join the account.

Assigning roles

The roles and permissions for Data Product Hub are described in Roles and permissions for Data Product Hub.

The primary user personas are data product consumer, data product producer, and administrator. Following are the minimum role assignments for each persona.

Required roles for data product consumers: IAM Platform role: Viewer; Data Product Hub collaborator role: Viewer
Required roles for data product producers: IAM Platform role: Viewer; Data Product Hub collaborator role: Editor
Required roles for administrators: IAM Platform role: Viewer; IAM Service role: Manager; Data Product Hub collaborator role: Admin

Working with access groups

Access groups expedite role assignments by grouping permissions for large numbers of users. You create a group and assign policies and rules to the group. When you assign a user to an access group, their access rights are determined by the group policies. All members of an access group have the same access permissions, and all members are updated when the group is edited.

Select Administration>Access(IAM)>Access groups to set up access groups for Data Product Hub.

You can also indicate the access group when you invite users to the account.

Assigning roles individually

Roles can be assigned to individual users. Select Administration>Access(IAM)>Assign access for each user.

You can also indicate the access policy when you invite users to the account.

Next step

The next step is to add the users to the Data Product Hub community and assign them collaborator roles to work in Data Product Hub. For more information, see Managing the Data Product Hub community.

Learn more

Parent topic: Account and service configuration