Grant Access new users

In an effort to reduce spam, we are now requiring new users to request jira/confluence access.

• Group for Confluence: confluence-users
• Groups for JIRA: jira-trunk-developer and jira-users.

First, ensure you have access to a user that can manage user permissions.

Keycloak

1. Head to Keycloak admin space and login with an user management admin user (NOT OpenMRS ID)
2. Change to the In the OpenMRS realm
3. In the OpenMRS realm, go to Users. Add the username desired, and search for it
4. Open the user, and head to groups
5. Search for the group desired (e.g. jira-trunk-developer and jira-users, confluence-users) and join it

Legacy way - ID dashboard and Formage

Use formage to add groups into our users.

• Go to https://id.openmrs.org/panel/model/user and log in (you will need to do this twice).
• Enter the user’s OpenMRS ID into the search box
• Click the “Edit” button
• Go down to the Groups list, it is the last set of fields. Click the “Add Item”, once per group you want to add.
• Finally, click the Save button located at the bottom of the page.

Please use formage https://id.openmrs.org/panel/model/user/ to make these changes. It has a hook to update LDAP. Details in Service-ID-Dashboard

WARNING: do not click on Groups. It will bring the application down

To add all you need to do is update formage, our user management system for ID Dashboard.

• Go to https://id.openmrs.org/panel/model/user and log in (you will need to do this twice).
• Enter the user’s OpenMRS ID into the search box
• Click the “Edit” button
• Go down to the Groups list, it is the last set of fields. Click the “Add Item”, once per group you want to add.
• Add confluence-users, jira-users, and jira-trunk-developer
• Finally, click the Save button located at the bottom of the page.

Chances are it's going to timeout several times. Just keep retrying, it will eventually work.

The changes will be immediate if the user logs out and logs back in Please advise users to do so. Otherwise, it will in effect within up to 30 minutes.

Please use formage to make these changes. It has a hook to update LDAP. See Service-ID-Dashboard for details.

Troubleshooting

If the user doesn't show up in formage, just ask them to login again to ID from a new device or anonymous windows. If they cannot do that, if you attempt to send the reset email, it should show up in formage again.