L3 - Default In cloud environments, users must be able to manage collection roles and add other users. We might be able to utilise https://auth0.com/docs/users/user-search/retrieve-users-with-get-users-endpoint to fetch the user data.
The Accounts Service has an endpoint to list all users: https://github.com/camunda-cloud/accounts/issues/1193
However, it is a protected endpoint, for which Optimize would need to provide a m2m token. Sadly the token library is written in typescript so we can't use this, and might need to get the token directly from auth0: https://github.com/camunda-cloud/camunda-cloud-idm/blob/main/src/auth0/auth0.token.controller.ts
Notes:
- Groups do not exist in the cloud
- It may or may not make sense to have an in-memory cache for cloud users. If there is an alternative, this could possibly be more appropriate.
1.
|
Get cloud users into Optimize |
|
Done | Unassigned |
2.
|
Fetch user list from accounts service |
|
Done | Unassigned |
3.
|
Remove 'group' terminology from user list selection |
|
Done | Unassigned |