Liferay PaaS Experience: User Management
Liferay PaaS Experience has no invite flow inside Argo CD, Argo Workflows, or Grafana themselves. Instead, you grant access to those tools from Customer Portal, the same account management application you use for support and subscriptions. There are no per-tool or per-role permissions yet, so a user either has access to all three tools or has none.
Granting PaaS Access
You need Project Owner or Administrator permissions in Customer Portal to manage team members and grant PaaS access.
-
Sign in to Customer Portal and go to Projects, then select your project.
-
Click Team Members.
-
If the person isn’t already listed under Team Members for the project, invite them there first. PaaS access can only be granted to existing team members.
-
Scroll to the section titled Manage roles and permissions of users within each product, and find the PaaS Users card. Its description confirms the scope: “PaaS Users will have access to the PaaS Experience applications (Argo CD, Argo Workflows, and Grafana).”
-
Click Select team member(s)….
-
In the dialog that opens, search for the team member by name or email and select them. You can select more than one.
-
Click Save. The person appears in the PaaS Users list on the card.
Logging In
Once granted access, a user signs in to Argo CD, Argo Workflows, or Grafana with their own Liferay account credentials through single sign-on, not through a shared administrator login. Each tool shows a restricted view for these logins; for example, Argo CD hides the Sync, History and Rollback, and Delete controls.
Each tool is a separate sign-in today; there’s no single session that covers all three at once, so a user signs in to each tool they need to use.
You receive the URLs for Argo CD, Argo Workflows, and Grafana in a provisioning email, the same way you do for the existing Liferay PaaS offering.
Revoking Access
To revoke a user’s PaaS access, remove them from the PaaS Users card in Customer Portal. This is sufficient on its own: removing a user from PaaS Users also removes them from Liferay’s Okta, which cuts off their access to Argo CD, Argo Workflows, and Grafana. You do not need to remove them from Team Members as well.