Group Workflows

The HERE platform allows you to work in teams using groups. Organization and group admins can create and manage groups, add or remove apps, and add or remove users to or from a group.

The platform uses groups to manage pipeline access to layers. Apps can only write to output layers if they are part of an authorized group. Refer to the Teams and Permissions User Guide for more information.

The OLP CLI provides tools for managing groups, such as:

For more details, see Group Commands.

Create a New Group

Follow the steps below to create a new group.

  1. Enter the group create command.

    olp group create olpcli-test-group-workflow
    
  2. To verify the group is available, enter the group list command.

     olp group list olpcli-test-group-workflow
    

    The command displays the following results.

     Available groups:
    
     id                                              name
     GROUP-221718b7-926f-4a9c-940c-6a4a221002ff      olpcli-test-group-workflow
    

Add an App to a Group

Follow the steps below to add an app to a group.

  1. Take an app id from credentials.properties file.

     ...
     here.client.id = N5Rwwo7vCbKZ5LkNeJfO
     ...
    

    For information on how to obtain your access credentials, see the Credentials Setup chapter.

  2. Enter the add a member command.

    Linux
    Windows
    olp group member add GROUP-221718b7-926f-4a9c-940c-6a4a221002ff \
            --app N5Rwwo7vCbKZ5LkNeJfO
    olp group member add GROUP-221718b7-926f-4a9c-940c-6a4a221002ff ^
            --app N5Rwwo7vCbKZ5LkNeJfO
  3. To verify the app is added, enter the group member list command.

     olp group member list GROUP-221718b7-926f-4a9c-940c-6a4a221002ff
    

    The command displays the following results.

    
        Available group members:
    
        type           HRN                                                                               id                                         name
        app            hrn:here-cn:account::olp-here-test:app/N5Rwwo7vCbKZ5LkNeJfO                       N5Rwwo7vCbKZ5LkNeJfO                       olp-cli-app
        

Make a User a Group Admin

Follow the steps below to make a user a group admin.

  1. Take a user id from credentials.properties file.

     ...
     here.user.id = HERE-3c30a9c3-e75d-4c54-ad5c-eac9b3809608
     ...
    

    For information on how to obtain your access credentials, see the Credentials Setup chapter.

  2. Enter the add an administrator command.

    Linux
    Windows
    olp group admin add GROUP-221718b7-926f-4a9c-940c-6a4a221002ff \
            --user HERE-3c30a9c3-e75d-4c54-ad5c-eac9b3809608
    olp group admin add GROUP-221718b7-926f-4a9c-940c-6a4a221002ff ^
            --user HERE-3c30a9c3-e75d-4c54-ad5c-eac9b3809608
  3. To verify the user is an admin, enter the group admin list command.

     olp group admin list GROUP-221718b7-926f-4a9c-940c-6a4a221002ff
    

    The command displays the following results.

    
        Group administrators:
    
        type           HRN                                                                               id                                         name
        user           hrn:here-cn:account::olp-here-test:user/HERE-3c30a9c3-e75d-4c54-ad5c-eac9b3809608 HERE-3c30a9c3-e75d-4c54-ad5c-eac9b3809608  John Doe
        

Grant Group Permission for a Catalog

Use your own pre-created catalog. For more information on creating catalogs, see the catalog create command.

To share a catalog with a specific group, enter the grant permissions command.

Linux
Windows
olp catalog permission grant hrn:here-cn:data:::olpclitestcatalog \
    --group GROUP-221718b7-926f-4a9c-940c-6a4a221002ff --read --write
olp catalog permission grant hrn:here-cn:data:::olpclitestcatalog ^
    --group GROUP-221718b7-926f-4a9c-940c-6a4a221002ff --read --write

The command displays the following results.


Granted access for a group GROUP-221718b7-926f-4a9c-940c-6a4a221002ff to catalog hrn:here-cn:data:::olpclitestcatalog

Revoke Group Permission for a Catalog

To remove catalog access from a group, enter the revoke permissions command.

Linux
Windows
olp catalog permission revoke hrn:here-cn:data:::olpclitestcatalog \
    --group GROUP-221718b7-926f-4a9c-940c-6a4a221002ff
olp catalog permission revoke hrn:here-cn:data:::olpclitestcatalog ^
    --group GROUP-221718b7-926f-4a9c-940c-6a4a221002ff

This command displays the following results.


Revoked access for group GROUP-221718b7-926f-4a9c-940c-6a4a221002ff to catalog hrn:here-cn:data:::olpclitestcatalog

Delete a Group

Enter the group delete command and specify the group ID.

olp group delete GROUP-221718b7-926f-4a9c-940c-6a4a221002ff

The command displays the following results.

Group GROUP-221718b7-926f-4a9c-940c-6a4a221002ff has been deleted.

To get a full list of available commands, enter olp --help.

results matching ""

    No results matching ""