User and Namespace Administration

Tutorial Overview

This tutorial is a task-oriented guide to common user and namespace administration activities necessary to operate in the VANTIQ system. It assumes that the VANTIQ server is running and a VANTIQ organization has been configured to allow the organization administrator to login. This tutorial is intended to be used by organization and namespace administrators.

All lessons make use of Modelo, VANTIQ’s web-based developer toolset. Modelo has two modes of operation, Development and Operations, each of which can have multiple projects. The tasks in this tutorial use Operations mode, which is selected at the top of the Modelo page. The first three tasks involve adding new users to a VANTIQ organization so please make sure you are logged in as organization administrator for those tasks. Subsequent tasks require administrative access in the namespace for which the task is targeted.

Concepts and Terminology

A VANTIQ namespace defines an isolated environment for users of the VANTIQ system. Each namespace guarantees separation of Projects, Apps, Collaboration Types and other VANTIQ resources from all other namespaces.

From the perspective of a VANTIQ user, there are three different relationships the user can have to a namespaces:

For this tutorial, it is helpful to think about three categories of namespaces:

When creating a new user in a given namespace, there are three common namespace privileges from which to select:

(The Modelo UI allows the selection of another privilege level, Custom, which requires the specification of VANTIQ profiles. This privilege level is outside the scope of this tutorial.)

Task 1: Adding a New Administrator

The VANTIQ organization administrator has the ability to add additional administrators to the organization. To add a new user with administrator capabilities to the organization, use the Administer button to select Users:

        Users

Use the Create New icon button (small plus sign in a circle at the top, right of the Users pane) to create the new user:

        NewUser

Use the Privileges button to select Admin from the Edit Namespace Privileges dialog:

        UserAuths

Use the OK button to save the authorization parameters. Creating a new user involves sending an invitation either via email or SMS. Use the Invite Destination and Invite Source fields to select how to deliver that invitation. The most convenient method is via email. Enter the email address of the person to invite in the Invite Destination and select GenericEmailSender as the Invite Source. To send an invitation via SMS, you’ll have to configure an SMS Source before adding users.

Use the Save Changes icon button (down arrow at the top, right of the User: New User pane) to send the invitation.

The recipient of the invitation must follow the link provided in the invitation text to authenticate. Successful authentication will create the new user in the VANTIQ system and allow that user to log in as an administrator for the organization.

Task 2: Adding a New Developer

As previously described, a VANTIQ user assigned a Dev privilege level may create and administer new namespaces within the organization but otherwise has only read-only privilege in the organization namespace.

To add a new developer, follow the instructions from the previous task, Adding a New Administrator, but select Dev from the Privileges pull-down list in the Edit Namespace Privileges dialog.

Task 3: Adding a New User

As previously described, a VANTIQ user assigned a User privilege level has the ability to view but not create, modify or delete resources within the organization namespace. However, it is also the case that the same VANTIQ user may be assigned an Admin privilege level in namespaces created in the organization. (This case is described in a following task.) Such a user is typically assigned Admin privilege level to administer an Application Namespace, as previously described.

To add a new standard user, follow the instructions from the previous task, Adding a New Administrator, but select User from the Privileges pull-down list in the Edit Namespace Privileges dialog.

Task 4: Creating a Developer Namespace

As previously described, a Developer Namespace is a namespace used by a VANTIQ developer to hold the resources that are under development. The namespace’s collection of resources is loosely referred to as a VANTIQ application.

The first step in creating a Developer Namespace is to have an organization administrator create a VANTIQ user assigned Dev privilege level. Follow the steps in Task 2, selecting Dev from the Privileges pull-down list.

Once the new developer has accepted the invitation and logs in to the VANTIQ system, the developer then creates the developer namespace. Use the Administer button to select Namespaces:

        Namespaces

Use the Create New icon button (small plus sign in a circle at the top, right of the Namespaces pane) to create the new namespace:

        NewNamespace

In this example, the developer is creating the “SensorDevelopment” namespace. Use the Save Changes icon button (down arrow at the top, right of the Namespace: New Namespace pane) to create the new namespace. Once the namespace is created, the developer will likely want to switch to using the new namespace. To switch namespaces, tap the username found at the top, right of the Modelo title bar, in this case “nsadmin1”:

        About

then use the Change Namespace button to display the Change Namespace dialog:

        ChangeNamespace

Use the SensorDevelopment link to switch into the newly created namespace. Note this will cause Modelo to reload and may require the user to reauthenticate since the new namespace will have its own set of VANTIQ resources.

Task 5: Creating an Application Namespace

As previously described, an Application Namespace is a namespace used by the organization to hold the resources of a deployed VANTIQ application. An Application Namespace should be created by an organization namespace administrator (rather than a developer) since the administrator can invite both new and existing VANTIQ users into the namespace.

Use the Administer button to select Namespaces:

        Namespaces

Use the Create New icon button (small plus sign in a circle at the top, right of the Namespaces pane) to create the new namespace:

        NewAppNamespace

In this example, the administrator is creating the “SensorApp” namespace.

The administrator must then choose to either self-assign the administrator role of the new namespace or to assign the administrator role to another new or existing VANTIQ user.

Use the Save Changes icon button (down arrow at the top, right of the Namespace: New Namespace pane) to create the new namespace.

Task 6: Inviting Users to a Namespace

Once a namespace has been created by either an organization administrator or a developer, that namespace’s administrator may authorize other users to use that namespace. If the namespace is a Developer namespace, only existing users may be authorized. If the namespace is an Organization or Application namespace, both new and existing users may be authorized.

To authorize a user to use the existing namespace, first use the Administer button to select Namespaces:

        Namespaces

then tap the target namespace link to display the Namespace Properties pane:

        AuthUserToNamespace

then tap the Manage Authorizations link to display the Edit Authorized Users dialog:

        EditAuthUsers

then tap the Authorize User button to display the Send Invite dialog:

        SendInvite

As previously described, use the Invite Destination and Invite Source fields to send the invitation. Use the Privileges pull-down list to select the privilege level the user is given when using the namespace. Finally, use the Send Invite button to send the invitation.

Task 7: Revoking a User’s Access to a Namespace

The administrator of a namespace may wish to revoke a user’s access to the namespace for any reason. To revoke access, first use the Administer button to select Namespaces:

        Namespaces

then tap the target namespace link to display the Namespace Properties pane:

        AuthUserToNamespace

then tap the Manage Authorizations link to display the Edit Authorized Users dialog:

        EditAuthUsers

Find the name of the user to revoke then use the Revoke Access icon button in the Actions menu to finish the revocation process.

Task 8: Changing a User’s Privilege Level for a Namespace

The administrator of a namespace may wish to change a user’s privilege level for the namespace. To change the privilege level, first use the Administer button to select Users:

        Users

then tap the target user link to display the User pane:

        ChangeUser

then use the Privileges button to select the new privilege level from the Edit Namespace Privileges dialog:

        UserAuths

Use the OK button to save the new user privileges, then use the Save Changes icon button (down arrow at the top, right of the User: username pane) to save the user parameters.