Assigning Users to Roles in a Workspace

Create custom experiences for each type of user by specifying the user's role has and the workspaces the user can access.

This workflow requires administrator privileges and uses identity provider (IdP) mappings to define a user's role. You might want to add a user as a member of a workspace instead of defining a role in the following cases.
  • You do not have administrator privileges.
  • You do not know the identity provider configuration.
  1. Navigate to Access Control » Workspaces.
  2. Find the workspace you want to add users to and click » Edit workspace.
    A user must be a member of a workspace to access the systems and data within the workspace. This is true for both the SystemLink Enterprise web application and the SystemLink REST APIs.
  3. Click Role mappings.
  4. Click +Mapping and select the attribute that matches the authentication protocol your organization configured at installation.
  5. Enter the attribute and value for the users you are mapping to the role.
    Attributes can include the following:
    • The common OpenID Connect claims such as email
    • Non-standard claims such as groups for Microsoft Entra ID
    Note
    • All string values are case sensitive.
    • If the claim value is a scalar, it must exactly match the value you specify in the role mapping .
    • If the claim value is an array, one of the array elements must exactly match the value you specify in the role mappings.
    • If the claim value contains quotes, you must escape the quotation marks with a backslash. Refer to the following example and the following figure. 
      {
  "userinfo": {
    "sub": "88442211",
    "country": "US",
    "name": "Bob Smith",
    "http://www.example.come/roles": [
      "user",
      "a\"b"
    ]
  }
}
  6. In the Role column, select the role you want to assign to the user.
  7. Optional: If a user or group of users needs more than one role, create a separate mapping for each role.
  8. Click Update.
    After a user logs into SystemLink Enterprise for the first time, their account appears under Access Control » Users.
  9. If a user or group of users needs access to more than one workspace, repeat these steps for each workspace.
    If you add a user to multiple workspaces, the user sees resources in the workspaces simultaneously.
The user now has a role in the workspace. When a user logs in to SystemLink Enterprise, the user can see their assigned roles and workspaces under Account » Workspaces.