# Set up access and admin users

Follow the steps below to grant users access to the Solutions Portal and designate Solutions Portal admin user(s).

NOTE

You need to have CDF administrator rights to set up access to the Solutions Portal.

In this article:

# Grant user access and designate Solutions Portal admins

The Solutions Portal uses the Cognite Data Fusion (CDF) access management system to grant access to suites and boards.

# Before you start

Make sure you have registered the Cognite API and the CDF portal application in Azure AD and set up Azure AD and CDF groups to control access to CDF data.

# Grant standard user access

All Solutions Portal users must have these capabilities via any of their group memberships:

  • groups:list(current-user)
  • files:read

If necessary, add users to an existing group with the required capabilities, or follow the steps in set up Azure AD and CDF groups to control access to CDF data to create a CDF group and link it to a group in Azure AD.

# Designate Solutions Portal admins

  1. If the group doesn't already exist, create a CDF group named dc-system-admin.

  2. Grant these capabilities to the group:

    • groups:list(all)
    • files:read, files:write
    • dataset:read, dataset:write
  3. Add the users you want to be Solutions Portal admin users to the dc-system-admin group.

# Allowlist the Solutions Portal domain names (legacy)

NOTE

This is a legacy option for older CDF projects.

Navigate to the Access management section in Cognite Data Fusion (opens new window) to allowlist the Solutions Portal domain(s) for your CDF project. To access the Solutions Portal in CDF projects, add cogniteapp.com to the Allowed application domains list.

# Create a data set for image files (optional)

The first time a Solutions Portal admin logs in to the app, the Solutions Portal automatically creates a data set to store image files, such as board previews and a company logo.

You can also create the data set manually to restrict the files:write and files:read capabilities to the dc-system-admin group, or set other configuration options for the data set. Make sure that you set the externalId for the data set to dc_img_preview_storage.

Last Updated: 12/7/2021, 5:30:36 PM