User's Guide: Create Groups

1.0 Introduction

Welcome to the Fortanix Confidential Computing Manager (CCM) User Guide. This article describes how to create a group in CCM.

A group is a collection of users and objects that helps users manage identities, create third-party groups, and organize and secure applications, datasets, and workflows that belong to the group.

For more information, refer to User's Guide: Groups and Third-party Groups.

2.0 Create, Update, and Delete Groups

2.1 Create a Group

To create a group:

  1. Click the Groups menu item in the CCM left navigation bar and click + ADD GROUP to add a new group.

    CreateGroup-CCM.png

    Figure 1: Create Group

  2. In the Create Group form, enter the following details:

    • Name – the group name. For ex: group1.

    • Description (optional) – the dataset description.

    • Labels (optional)– attach one or more key-value labels to the group.

  3. Click CREATE GROUP to complete creating the group.

    CreateGroupForm-CCM.png

    Figure 2: Create new group

  4. The group is created.

    GroupCreated-CCM.png

    Figure 3: Group Created

NOTE

  • For existing Fortanix CCM accounts, after the CCM 3.35 release, a group will automatically be created for all the resources, such as applications, datasets, workflows, and so on, and set as default.

  • For a new Fortanix CCM account, you must create a group manually.

  • From the group list page and from the group details page, you can check all the associated users, tasks, applications, images, datasets, application configurations, and workflows.

  • In the detailed view of a group, the Users section lists the members of the group.

    • All the users in an account with an Administrator role will be added to the groups by default as Group administrators and they cannot be removed from the group.

    • All the users in an account with a Viewer role will be added to the groups by default as Group auditors. These users cannot be removed from the group.

    • All users in an account with an Editor role must manually be added to a group as Group administrator or Group auditor. These users cannot be removed from the group. Refer to Section 2.2: Update Group Permission for a User.

      In CCM 3.35 version, the existing users with Editor role will not be able to see any objects that are created by them or by the administrator after migration. So, the user with Editor role must be added to the CCM_DEFAULT group by the Administrator as Group administrator.

  • You can create new applications, application configurations, users, datasets, and workflows from the group details page.

  • For information about the Participation Tokens, refer to Users Guide: CCM Groups and Third-Party Groups.

GroupDetails-CCM.png
Figure 4: Group detailed view

2.2 Update Group Permission for a User

Users with Editor roles in a CCM account must manually be added to a group as Group administrator or Group auditor using the following steps:

  1. In the detailed view of a Fortanix CCM group, click the USERS tab.

  2. On the Users page, click +USERS to add a new user.  

    AddUser-CCM.png

    Figure 5: Add user to group

  3. In the ADD USERS form, select the user in the first column.  

    SelectUser-CCMGroup.png

    Figure 6: Select user

  4. For the new user, select the appropriate group permission.

  5. Click SAVE CHANGES to save the changes.  

    SelectUserPerm-CCMGroup.png

    Figure 7: Select group permission for user

2.3 Update a Group

To edit a group:

  1. In the group's table view, click the overflow menu for the group you want to edit, and click EDIT GROUP to edit the group.

    EditGroup-CCM.png

    Figure 8: Edit Group

  2. In the EDIT GROUP form, make the necessary updates to the name, description, and label, and click SAVE.

  3. You can edit the group's Name, Description, Location, Labels, and Credentials.

  4. Click SAVE after you edit the group.

    EditGroupform-CCM.png

    Figure 9: Edit group details

2.4 Remove a Group

To delete a group:

  1. In the group's table view, click the overflow menu for the group you want to remove.

  2. Click REMOVE GROUP to delete the group.

    DeleteGroup-CCM.png

    Figure 10: Remove Group