Procedure for assigning roles and scopes - Manual - Developer Cockpit for Subscribers to MindAccess Plans - The developers can create and manage applications within the platform and use various services. The Industrial IoT capability packages excludes Cloud Foundry compute resources for developing applications using various capabilities packs. - Industrial Operations X - Insights Hub - MindAccess Plans - Developer Cockpit - Cloud-based application

To assign roles and scopes for an application, follow the steps:

1. In application overview page, click "Configure" after saving the application.
2. In Authorization Management, select "App Roles" tab.
3. In the "Applications" window, select your saved application from the list.

4. In "Scopes & API Roles" tab, click "Create scope" to enter the scope name and enable the check box for Admin or User or both, as per requirement and click "Save".

   Note

   • When the mobile type application is created, it is automatically assigned with a default scope: "._access" . This default scope "<appname>._access" is for mobile application only. This scope cannot be modified or deleted by the user. If you add roles to your application, by default the scope is assigned to the created role.
   • Creating at least one scope is mandatory to proceed for the registration of the application.
   • Every application specific scope is automatically prefixed with the application name.
   • Every role can be found in "Settings" in the following scheme: mdsp:<tenantname>:<application>.<role>.
   • Avoid creating scopes which contains the scripting word like, “document.write”. As these scopes will create an issue for IAM transactions.

5. Click "Add API Role" and fill the application role name with description from the drop-down menu displayed in the dialog box and click "Save".
   

6. Click "Add Third Party API role" and fill the Third party API role name with description from the drop-down menu displayed in the dialog box and click "Save".
   
7. Click "Add Service Scope Mapping" and select an application scope to map the provisioned app scopes to your application and click "Add Mapping".