Manual MACMA configuration after setting up a new tenant

Each application integrated in Nexeed IAS brings some roles and permissions and needs some roles and permissions from other integrated applications.

The basic IAS deployment takes care of the role assignment to the applications in the default (BCI) tenant.

Since Nexeed IAS is a multi-tenant system, we have to take care of the role assignment to the applications in the newly created tenants. As this step is currently not automated, it must be done manually for the time being.

Service account roles provided by Condition Monitoring (CM)

CM provides roles that need to be set per tenant.

Machine data sender

Required	Yes
Domain	Condition Monitoring
Description	Enables actors, like the Information Router, to send measurement and machine messages via HTTP to CM.

Service account roles needed by Condition Monitoring (CM)

CM requires several roles that need to be set per tenant.

User Reader (user-reader)

Required	Yes
Domain	Multitenant Access Control
Description	Enables CM read user and tenant information.

Equipment Administrator (Admin)

Required	Yes
Domain	Master Data Management
Description	Enables CM to read, add and delete equipment master data.

Portal Registration (Portal_Registration)

Required	Yes
Domain	Web Portal
Description	Enables CM to register in the Portal.

Data Publisher Registration (DataPublisherModuleRegistration)

Required	Yes (if Data Publisher module is installed)
Domain	Data Publisher
Description	Enables CM to register data types in the Data Publisher.

Deviation Processor Detector (DeviationProcessorDetector)

Required	Yes (if Deviation Processor module is installed)
Domain	Deviation Processor
Description	Enables CM to send deviations to Deviation Processor.

MDM reload for the new tenant

Condition Monitoring (condition-monitoring-core)

Admin Rest API to control reloading of device master data from MDM for a specific tenant:

e.g. in case it is a new tenant configured after installation
e.g. you want to synchronize the device master data for this tenant
e.g. a manual change is done in MDM database
1. Get Token for Condition Monitoring
2. call POST {URL}/cm/core/v1/{ownerTenantId}/mdm/reload → needs Condition Monitoring Administrator Role

Rules Management (rule-service-app)

Admin Rest API to control reloading of device master data from MDM for a specific tenant:

e.g. in case it is a new tenant configured after installation
e.g. you want to synchronize the device master data for this tenant
e.g. a manual change is done in MDM database
1. Get Token for Condition Monitoring
2. call POST {URL}/cm/rm/rule-manager/v1/{ownerTenantId}/mdm/reload → needs Rules Management Administrator Role