You can import users from a previously-configured LDAP identity provider and assign them the Organization Administrator or Organization User role in a Data Management for VMware Tanzu Tenant Org. You can configure the LDAP group-to-role mapping when you create the organization, or any time after organization creation as described in the procedure below.
Prerequisites
Before you import LDAP users, ensure that you have configured an LDAP server for your Data Management for VMware Tanzu installation.
Procedure
Perform the following procedure to import users from LDAP and assign them the Organization Administrator or Organization User roles:
Select Organizations from the left navigation pane.
This action displays the Organizations view, a table that lists the configured organizations.
Examine the organizations listed in the table, identify the Tenant Org into which you want to import LDAP users, and navigate to that table row.
Click anywhere in the row.
The Organizations > <org_name> pane, Databases tab displays.
Click the Settings tab.
The LDAP Integration pane displays.
Click EDIT in the upper right corner of the pane.
The LDAP Integration dialog displays.
Specify the LDAP group to Data Management for VMware Tanzu role mapping:
Property Name Value Admin Groups The LDAP groups whose users you want Data Management for VMware Tanzu to assign the Organization Administrator role in the organization. User Groups The LDAP groups whose users you want Data Management for VMware Tanzu to assign the Organization User role in the organization. Click UPDATE.
Data Management for VMware Tanzu associates the LDAP users in the specified groups to the Organization Administrator and Organization User roles. These users can now log in to the Data Management for VMware Tanzu console using their LDAP credentials.
Note: An LDAP user is added to Data Management for VMware Tanzu and displays in the Users view after they log in for the first time.
