Skip to main content
Lerian Cabine lets an administrator manage operator users through Access Manager.

​
Users and groups

The Administração workspace has three screens: Usuários, Funções, and Exclusões. Cabine sends the user and group calls to Access Manager with the token of the signed-in operator. On Usuários, you can:
  • Create a user with Novo usuário. Choose the groups of the user.
  • Change the name, the e-mail, and the groups of a user with Editar.
  • Set a new password with Redefinir senha.
Funções lists the access groups that Access Manager returns, with their members. Assign the four Cabine API groups in Access Manager: admin-group, br-desk-admin-group, br-desk-operator-group, and br-desk-viewer-group. admin-group is the Access Manager administrator group: it also gives administrator access on the Lerian rails, Lerian SPB included. To make a person a Cabine API admin and nothing more, assign br-desk-admin-group. Access and roles names what each group may do. For the calls behind these screens, see List Users, Create a User, Update a User, Reset a User Password, and List Groups. The Identity service describes users and groups.

​
User deletion

A Cabine API admin requests the deletion of an operator user. A different Cabine API admin approves or rejects it. The Cabine API deletes the user in Access Manager only after the approval.
  1. An admin selects Solicitar exclusão on Usuários. Without the Cabine API, Solicitar exclusão is disabled, with the hint Exclusão indisponível neste ambiente. To confirm the request, type the username.
  2. The request shows in Exclusões.
  3. A different admin selects Aprovar and confirms with Excluir to delete the user, or Rejeitar to keep the user.
A person decides, not an application. The Cabine API refuses a second request for a user while a request is pending or failed.

​
When Access Manager does not delete the user

The Cabine API answers 502 and does not record the approval. The request stays in Exclusões with Falha na execução. To retry, select Aprovar again. The approver still differs from the requester. If Access Manager no longer has the user, the retry succeeds. The Cabine API keeps a deletion request for 30 days by default. For the calls, see Request, Approve, and Reject.