If you’re creating attributes manually
Steps
-
Go to Directory → User Attributes.
-
Click the icon, select Declared as the attribute type, and click Next.
-
Add the ArgoCD attribute:
-
In the Name field, enter
P1ASArgoCDRoles
. -
In the Display Name field, enter
P1AS ArgoCD Roles
. -
In the Description field, enter
P1AS app roles for ArgoCD
. -
Select the Allow multiple values option.
-
Select the Enumerated values option and enter
argo-configteam
in the corresponding field. -
Click Save.
-
-
Add the Grafana attribute:
-
In the Name field, enter
P1ASGrafanaRoles
. -
In the Display Name field, enter
P1AS Grafana Roles
. -
In the Description field, enter
P1AS app roles for Grafana
. -
Select the Allow multiple values option.
-
Select the Enumerated values option and enter the appropriate administrative role attribute mappings for each of your environments. See Administrative role mappings for a list of available mappings.
For example, if you want to provide Grafana editor access to the development environment, enter
dev-graf-editor
in the corresponding field. To set it up for production and staging environments, enterprod-graf-editor
andstage-graf-editor
.-
Click Save.
-
-
Add the OpenSearch attribute:
-
In the Name field, enter
P1ASOpenSearchRoles
. -
In the Display Name field, enter
P1AS OpenSearch Roles
. -
In the Description field, enter
P1AS app roles for OpenSearch
. -
Select the Allow multiple values option.
-
Select the Enumerated values option and enter
os-configteam
in the corresponding field. -
Click Save.
-
-
Add the PingAccess attribute:
-
In the Name field, enter
P1ASPingAccessRoles
. -
In the Display Name field, enter
P1AS PingAccess Roles
. -
In the Description field, enter
P1AS app roles for Grafana
. -
Select the Allow multiple values option.
-
Select the Enumerated values option and enter the appropriate administrative role attribute mappings for each of your environments. See Administrative role mappings for a list of available mappings.
For example, if you want to provide PingAccess admin access to the development environment, enter
dev-pa-admin
in the corresponding field. To set it up for production and staging environments, enterprod-pa-admin
andstage-pa-admin
.-
Click Save.
-
-
Add the PingFederate attribute:
-
In the Name field, enter
P1ASPingFederateRoles
. -
In the Display Name field, enter
P1AS PingFederate Roles
. -
In the Description field, enter
P1AS app roles for PingFederate
. -
Select the Allow multiple values option.
-
Select the Enumerated values option and enter the appropriate administrative role attribute mappings for each of your environments. See Administrative role mappings for a list of available mappings.
For example, if you want to provide PingFederate audit access to the development environment, enter
dev-pf-audit
in the corresponding field. To set it up for production and staging environments, enterprod-pf-audit
andstage-pf-audit
.-
Click Save.
-
-
Add the Prometheus attribute:
-
In the Name field, enter
P1ASPrometheusRoles
. -
In the Display Name field, enter
P1AS Prometheus Roles
. -
In the Description field, enter
P1AS app roles for Prometheus
. -
Select the Allow multiple values option.
-
Select the Enumerated values option and enter
prom
in the corresponding field. -
Click Save.
-