Manage tenants in the Chef 360 Platform UI
On the Tenant Management page, you can add, manage, and configure organization units, users, licenses, and single sign-on (SSO) settings. The Org Units table contains the Org Id, Org Unit Name, Status, Description, and Actions columns.
To export the Org Units table in CSV format, select Export at the top-right of the table. Exported data is limited to a maximum of 100 records.
Create a new organization unit
To create a new organization unit, follow these steps:
Select Create New Org Unit.
Enter the Org Unit Name in the org unit name text box.
Add a Description of the organization unit.
If required, tick the checkbox to create a default skill assembly.
Note
If checked, Chef 360 Platform creates a skill assembly with default skills that it will install on nodes during enrollment. We recommend using this skill assembly for trials, proof of concepts, and non-production environments. Review and edit this assembly for production environments.
If unchecked, Chef 360 Platform creates an empty skill assembly. Update the skill assembly to include the required skills that Chef 360 Platform will install on nodes during node enrollment.
Select Save Org Unit.
Update or disable an organization unit
You can update or delete an organization unit by clicking the Actions menu option.
Select Update to update the organization unit.
- Enter the Org Unit Name.
- Enter a Description.
- Select Save Org Unit.
Select Disable to delete the organization unit.
You can use the Tenant Management UI to perform administrative tasks within the Chef 360 Platform (including User Management and License Management).
User management
All of the users are visible on the User Management page. The Users table contains the Email, Name, Status, and Actions columns.
To export the Users table in CSV format, select Export at the top-right of the table. Exported data is limited to a maximum of 100 records.
Edit a user
To edit a user, follow these steps:
Select the user from the Users table.
Select Edit User.
Update the Email, First Name and the Last Name of the user.
Select Save.
Disable or delete a user
Using the actions menu in the Actions column, you can perform the following actions:
- Disable a user
- Delete a user
Disable a user
To disable the user, follow these steps:
Select the three dots in the Actions Column.
Select Disable.
Select Disable User.
The disabled user won’t have access to Chef 360 Platform. If necessary, you can enable the user to provide them with access again.
Delete a user
To delete a user, follow these steps:
Select the three dots in the Actions Column.
Select Remove.
Select Remove User.
The removed user won’t have access to Chef 360 Platform. You can add the user again to provide them with access if required.
Once you have performed the action, the tenant user management table will be updated.
License management
The License Management page shows all the existing Chef 360 Platform licenses. You can load, sync, or upload a license using the button at the top right of the page. The table shows the License ID, Status, and Actions columns.
Load a license
To load a license, follow these steps:
Select Load License.
Enter the License ID in the text box.
Select Load.
Sync licenses
To sync your licenses, follow these steps:
Select Sync Licenses.
Select Confirm.
Upload a license
To upload a license, follow these steps:
Select Upload License.
Upload the license in JSON format.
Select Upload.
Disable, delete, or download a license
Using the actions menu in the Actions column, you can perform the following actions:
- Disable a license
- Delete a license
- Download a license
Disable a license
To disable the license, follow these steps:
Select the three dots in the Actions Column.
Select Disable.
Select Confirm.
Delete a license
To delete a license, follow these steps:
Select the three dots in the Actions Column.
Select Remove.
Select Confirm.
Download a license
To download a license, follow these steps:
Select the three dots in the Actions Column.
Select Download.
The license gets downloaded in your environment.
Once you have performed the action, the tenant license management table will be updated.
SSO configuration
The SSO Configuration page allows you to add and manage identity providers (IdPs) for a tenant. An IdP allows users to log in to Chef 360 Platform using their existing credentials from the external IdP. This simplifies the login process and enhances security by leveraging centralized authentication.
SSO restrictions
If an SSO identity provider provides user authentication, users have the following restrictions:
Users that log in using SSO can’t update their email address using identity management endpoints. The affected APIs are
PUT /identity/self
andPUT /identity/user/{userId}
.If
local_login
is disabled in the tenant SSO settings configuration, the following operations fail gracefully for all users:- Set password:
POST /identity/email/password/set
- Reset password:
POST /identity/email/{emailId}/password/reset
- Patch password:
PATCH /identity/self/credentials
- Expire password:
PATCH /identity/email/{emailId}/password/expire
- Login with username and password:
POST /identity/user/login
- Set password:
Note
If the SSO identity provider manages a user’s roles, the user can’t perform the following operations:
- Delete:
/platform/user-accounts/v1/user/{userId}/role/{roleId}
- Patch (disable user):
/platform/user-accounts/v1/user/{userId}/disable
- Patch (disable role):
/platform/user-accounts/v1/user/{userId}/role/{roleId}/disable
- Patch (enable role):
/platform/user-accounts/v1/user/{userId}/role/{roleId}/enable