How to create users in Camunda

Sudhanshu_Sekhar · April 2, 2021, 5:34am

Hi Team,

We are using Camunad -7.11.3-ee with a 6 node Cluster on WebLogic. We are using Oracle Data Base.

I want to create two different groups and assign users to that group.
All the users should have access to Camunda cockpit. I want to create those users at application installation time or by using any SQL script.

Can you please provide any reference for this.

Thanks,
Sudhanshu Dash

aravindhrs · April 2, 2021, 6:56am

@Sudhanshu_Sekhar you can check this example for creating users and groups:

github.com

camunda/camunda-bpm-platform/blob/552ce4d9aa53fd21bb90c0f8be48d473ac245791/examples/invoice/src/main/java/org/camunda/bpm/example/invoice/DemoDataGenerator.java#L58-L141


public class DemoDataGenerator {
    private final static Logger LOGGER = Logger.getLogger(DemoDataGenerator.class.getName());
    public void createUsers(ProcessEngine engine) {
      final IdentityServiceImpl identityService = (IdentityServiceImpl) engine.getIdentityService();
      if(identityService.isReadOnly()) {
        LOGGER.info("Identity service provider is Read Only, not creating any demo users.");
        return;
      }
      User singleResult = identityService.createUserQuery().userId("demo").singleResult();
      if (singleResult != null) {
        return;
      }
      LOGGER.info("Generating demo data for invoice showcase");

This file has been truncated. show original

For group authorizations:

github.com

camunda/camunda-bpm-platform/blob/552ce4d9aa53fd21bb90c0f8be48d473ac245791/examples/invoice/src/main/java/org/camunda/bpm/example/invoice/DemoDataGenerator.java#L155-L251


Authorization salesTasklistAuth = authorizationService.createNewAuthorization(AUTH_TYPE_GRANT);
salesTasklistAuth.setGroupId("sales");
salesTasklistAuth.addPermission(ACCESS);
salesTasklistAuth.setResourceId("tasklist");
salesTasklistAuth.setResource(APPLICATION);
authorizationService.saveAuthorization(salesTasklistAuth);
Authorization salesReadProcessDefinition = authorizationService.createNewAuthorization(AUTH_TYPE_GRANT);
salesReadProcessDefinition.setGroupId("sales");
salesReadProcessDefinition.addPermission(Permissions.READ);
salesReadProcessDefinition.addPermission(Permissions.READ_HISTORY);
salesReadProcessDefinition.setResource(Resources.PROCESS_DEFINITION);
// restrict to invoice process definition only
salesReadProcessDefinition.setResourceId("invoice");
authorizationService.saveAuthorization(salesReadProcessDefinition);
Authorization accountingTasklistAuth = authorizationService.createNewAuthorization(AUTH_TYPE_GRANT);
accountingTasklistAuth.setGroupId("accounting");
accountingTasklistAuth.addPermission(ACCESS);
accountingTasklistAuth.setResourceId("tasklist");

This file has been truncated. show original

Sudhanshu_Sekhar · May 31, 2021, 7:58am

Thanks Aravind.

system · January 30, 2024, 12:59pm