Daml Hub Feature Demo - User Management

Captions as YouTube publishes them, usually machine-generated, so names such as Daml and Canton can be misheard.

1. 0:12

   hey D hublers David Richards here I'm the product manager responsible for D Hub in this video I'm going to take you through a theoretical example for user management and show you how you can manage users and their rights in the D Hub console now before user management Applications had to use multi-party tokens and the right of a particular user were managed within the token itself amongst other drawbacks this meant that if the rights of a user

2. 0:37

   needed to change a right was taken away for example then the token itself needed to be changed with the introduction of the concept of users and user management to damel if the rights of a user need to change then the token doesn't need to be changed the relationship of users to parties moves into The Ledger itself rather than in the token now I'm going to show you an example from The daml Hub

3. 1:02

   docs to show you how you can manage Dynamic group behavior in the daml hub console so here's the Ledger that I've created for the purposes of this demo you can get on to the ability to manage parties and users on the identities tab here on the left hand side so we have the parties tab here we have the users tab here and we also have service accounts now service accounts tab is

4. 1:27

   where you can create credentials to automate the for specific parties we're not going to go into that in this demo you can read about that in the demo Hub documentations so now here on the users tab we have our default users that are created with every Ledger again we're not going to go through this but you can read about it in the uh the D Hub documentation so in this demo we're going to create three users we have

5. 1:51

   Alice boib Bob and Charlie now Alex Bob and Charlie all work for the same company they um all have as I've just created a user and a presence on The Ledger now general practice is to also give these users their uh primary party an associate act as and read as rights for their Associated party now I created those parties uh before this demo just to make it smoother and so what I'm going to do now is associate Alice's act as she can act as her party

6. 2:28

   and also read as her party give her the act as and read as rights for her primary party I'm going to do the same for Bob so like you just saw to do that you click on the user on the left hand tab this right hand screen opens up and you can then associate those act as and read as rights to those users so give Bob his read as and act as rights and lastly I'll do the same for Charlie now in this organization

7. 3:00

   both Alice and Bob are managers and so what we can do is associate again another pre-made party called manager to Alice and also to Bob and what that means is they have the ability to read those contracts which involve a manager in their organization so given those them those rights so imagine now we you know build those into the application we can now use the the jot and things to to um authenticate as those users now like in any organization

8. 3:37

   Alice um changes roles stays within the company but is no longer a manager and Charlie takes on those responsibilities so what we're going to do here is take Alice and we're going to remove that manager right from Alice and we're going to apply it to Charlie now because we've used the tokens for the users and not directly for the parties we don't need to change the user token the rights for Alice and

9. 4:08

   Charlie have been changed on The Ledger so when they um authenticate as those users The Ledger knows which rights they have and therefore Alice can no longer view the party uh contracts of the manager and Charlie now can so as those rights have been changed and altered between those users we don't need to change change the the tokens that we authenticate at that all happens directly on The Ledger and The Ledger has that mapping between those users and those parties which can obviously be

10. 4:39

    managed in DL Hub through the dam Hub console here now everything I've done in fact let's uh let's claim that Charlie now didn't like being a manager found a role in another organization we can come here simply delete the user and therefore that that uh token will no longer work and that user no longer exists on The Ledger now all of those actions that I've shown here in the damble hub console can also be automated through our supported and

11. 5:06

    documented HTTP apis and so this is on the uh HTTP uh API documentation tab um so we have all of those in user management here and all of the the apis which are supported we then have the open API spec for those so you can see those apis in the middle here the responses and the examples on the right hand side now this is just a very simple example of how you can manage users and those rights and parties without having to to mess around

12. 5:38

    with tokens and change those all the time depending on the rights that are and roles that have changed for those users