Manage the resource hierarchy in your BlueXP organization
When you use BlueXP identity and access management (IAM) to associate a member with your organization, you provide permissions at the organization, folder, or project level. To ensure that those members have permissions to access the right resources, you'll need to manage the resource hierarchy of your organization by associating resources with specific projects and folders. A resource is a storage resource that BlueXP already manages or is aware of.
View the resources in your organization
You can view both discovered and undiscovered resources that are associated with your organization. Undiscovered resources are typically storage resources known through digital advisor for which you have not added as working environments.
|
Amazon FSx for NetApp ONTAP resources aren't displayed on the IAM resources page as you cannot associate them with an IAM role. You can view these resources on their respective canvas or from workloads. |
-
In the upper right of the BlueXP console, select
> Identity & Access Management.
-
Select Resources to view the Resources page.
-
Select Advanced Search & Filtering.
-
Use any of the available options to find the resource that you're looking for:
-
Search by resource name: Enter a text string and select Add.
-
Platform: Select one or more platforms, such as Amazon Web Services.
-
Resources: Select one or more resources, such as Cloud Volumes ONTAP.
-
Organization, folder, or project: Select the entire organization, a specific folder, or a specific project.
-
-
Select Search.
Associate a resource with folders and projects
If you want to make a resource available to folder or project in your organization, then you'll need to create an association between the folder or project and the resource.
You should understand how resource association works. Learn about resources, including when to associate a resource with a folder.
-
From the Resources page, navigate to a resource in the table, select
and then select Associate to folders or projects.
-
Select a folder or project and then select Accept.
-
To associate an additional folder or project, select Add folder or project and then select the folder or project.
Note that you can only select from the folders and projects for which you have admin permissions.
-
Select Associate resources.
-
If you associated the resource with projects, members who have permissions for those projects now have the ability to access the resource in BlueXP.
-
If you associated the resource with a folder, a Folder or project admin can now access the resource from within BlueXP IAM. Learn about associating a resource with a folder.
-
If the resource that you associated is discovered using a BlueXP Connector and you have other members in your organization, then you also need to associate the Connector with the project that the resource is now associated with. Otherwise, the Connector and it's associated resource aren't accessible from the BlueXP canvas by members who don't have the Organization admin role.
View the folders and projects associated with a resource
To identify where a resource is available in your organization's hierarchy, you can view the folders and projects that are associated with that resource.
|
If you need to determine which organization members have access to the resource, you can view the members who have access to the folders and projects that are associated with the resource. |
-
From the Resources page, navigate to a resource in the table, select
and then select View details.
The following example shows a resource that is associated with one project.
|
If you need to determine which organization members have access to the resource, you can view the members who have access to the folders and projects that are associated with the resource. |
Remove a resource from a folder or project
To remove a resource from a folder or project, you need to remove the association between the folder or project and the resource. After you remove the association, organization members can no longer manage the resource from the folder or project.
|
If you want to remove a discovered resource from the entire organization, you need to remove the working environment from the BlueXP canvas. |
-
From the Resources page, navigate to a resource in the table, select
and then select View details.
-
For the folder or project for which you want to remove the resource, select
-
Confirm that you want to remove the association by selecting Delete.