Account Management

Altinity.Cloud accounts with the role orgadmin are able to create new Altinity.Cloud accounts and associate them with organizations, environments, and one or more clusters depending on their role. (For more information on roles, see Role-Based Access and Security Tiers.)

There are three ways to create an account:

• Clicking the ADD ACCOUNT button on the Accounts page
• Clicking the INVITE button on the clusters page
• Creating users through an identity provider

Creating an account from the Accounts page

Users with orgadmin access can manage accounts through the Altinity Cloud Manager. Click the Accounts tab on the left to see the Accounts page:

Figure 1 - The accounts page

From the Accounts page, the easiest way to create an account is to click the button. You’ll see the Account Details dialog, which has three tabs (or maybe four):

• Common Information
• Environment Access
• Cluster Access (if the new account’s role is envuser)
• API Access

We’ll cover each of these next.

The Common Information tab

Basic information about the new account is on the Common Information tab.

Figure 2 - The Common Information tab

Field details

Name

The name of the new account.

Email

The email for the account.

Password

The password for this account. It must be at least 12 characters long, and the two passwords must match. The SAVE button will be disabled until the passwords match and are long enough.

Role

The role for the account. See the Role-Based Access and Security Tiers page for complete details on the available roles.

Suspended

If selected, this account is suspended and no logins will be accepted.

The Environment Access tab

This straightforward tab lets you define which environments are accessible to this account.

Figure 3 - The Environment Access tab

Click the checkboxes for all the environments that should be accessible to this account. The account role determines what actions this account can take with Environments and Clusters.

The Cluster Access tab

This tab only appears if this account has envuser access. This similarly straightforward tab lets you define which clusters are accessible to this account. The only clusters listed here are clusters in the environments you selected on the Environment Access tab.

Figure 4 - The Cluster Access tab

Click the checkboxes for all the clusters that should be accessible to this account. The account will have read, edit, and delete access to the selected clusters.

The API Access tab

Figure 5 - The API Access tab

This tab lets you define the API keys available for this account and the domains allowed to use those keys. Be aware that the API Keys section shown in Figure 5 may not appear for some user roles. For complete details, see the discussion of the API Access tab on the Altinity API Guide page.

Creating an account with the Invite button

Another way to create an account is by inviting a user from the clusters view page. The button is at the top of the page:

Figure 6 - The Invite button on the Clusters View page

Clicking the button takes you to this dialog:

Figure 7 - The Invite User dialog

Enter the user’s email and their role, then click the INVITE button. Once the user has accepted the invitation, you can manage their account from the Accounts page just like any other account.

Creating an account through an identity provider

Whether you’re using Okta or some other provider, contact Altinity support to configure your Altinity.Cloud account so that a user authenticated by your identity provider but previously unknown to Altinity.Cloud will have an account created automatically. See the Auth0 integration page for more details.

Configuring login settings

If you’re using an identity provider to control access to your Altinity.Cloud account, it’s a good idea to disable password access to your account. From the Accounts list, click the button at the top of the Accounts page to control login settings for your organization:

Figure 8 - The Login Settings dialog

These settings let you disable password logins for your organization, block API access, and allow admins to login with a password in case of an emergency. We strongly recommend that you block all password logins and DO NOT allow admin access via password. For a complete discussion of the security impact of these settings, see the section Disable password logins in the Altinity.Cloud Security Guide.

Editing an account

Editing an account is straightforward. In the Accounts list, click the vertical dots icon and select Edit from the menu:

Figure 9 - The Edit Account menu

This takes you to the Account Details dialog discussed above.

Deleting an account

Editing an account is straightforward as well. In the Accounts list, click the vertical dots icon and select Delete from the menu:

Figure 10 - The Delete Account menu

You’ll see a confirmation dialog:

Figure 11 - The Delete Account confirmation dialog