Manage groups and group membership with Amazon Cognito
Instead of assigning capabilities to individual users and service accounts, you use groups in Cognite Data Fusion (CDF) to define what capabilities members (users or applications) have to work with different CDF resources.
Follow the steps below to manage CDF group membership from Amazon Cognito.
When you create users in Amazon Cognito, the email and name user attributes are mandatory.
Step 1: Create a group in Amazon Cognito
-
Sign in to the Amazon Cognito console as an admin. If prompted, enter your AWS credentials.
-
Select User Pools and select an existing user pool from the list, or create a user pool.
-
Select the Groups tab
-
Select Create group.
-
Under Group information, enter a Group name.
Copy and make a note of the Group name. You'll use this name to link the group to a group in Cognite Data Fusion.
-
Select Create group.
-
Select the newly created group and add users to the group.
Step 2: Create a group in CDF and link it to an Amazon Cognito group
To link an Amazon Cognito group to a group in Cognite Data Fusion:
-
Sign in to Cognite Data Fusion as an admin.
-
Select the Admin workspace, and then select Groups > Create group.
-
Enter a Unique name for the group and Add capabilities.
-
In Members select Externally managed and in Source ID field, enter the Group name you copied from Amazon Cognito in step 5 above.
-
Select Create.
The members of the Amazon Cognito group automatically become members of the linked CDF group with the associated capabilities.