From 45a4089b4bb93fe6bc6ff8233720ef6cfb47dfe1 Mon Sep 17 00:00:00 2001 From: Greg Cobb Date: Tue, 24 Mar 2026 23:42:29 -0700 Subject: [PATCH] Extract user role management from getting-started - Replaced by new, comprehensive documentation in cloudfoundry/docs-cloudfoundry-concepts - Add links to additional documentation on CF roles, permissions, and user management [Content partially generated via Claude Sonnet 4.6] --- getting-started.html.md.erb | 105 ++---------------------------------- 1 file changed, 5 insertions(+), 100 deletions(-) diff --git a/getting-started.html.md.erb b/getting-started.html.md.erb index 9ea40af..dc32c66 100644 --- a/getting-started.html.md.erb +++ b/getting-started.html.md.erb @@ -111,115 +111,20 @@ By default, `config.json` is located in the `~/.cf` directory. You can relocate ## Manage users and roles -The cf CLI includes commands that list users and assign roles in orgs and spaces. +The cf CLI includes commands to list users and assign roles in orgs and spaces. For a full reference, including role assignment for UAA clients and multi-origin disambiguation, see [Managing roles](../concepts/managing-roles.html). -### List users +For more information about the available roles and their permissions, see [Orgs, Spaces, Roles, and Permissions](../concepts/roles.html). -To list all users in an org or a space: - -1. In a terminal window, log in to the cf CLI: - - ``` - cf login - ``` - -1. Run one of these commands: - * To list org users, run: - - ``` - cf org-users ORG - ``` - Where `ORG` is the name of the org for which you want to see the list of users. -
-
- The above command returns output similar to the example below: - 
-        Getting users in org example-org as username@example.com...
-
-        ORG MANAGER
-          username@example.com
-
-        BILLING MANAGER
-          huey@example.com
-          dewey@example.com
-
-        ORG AUDITOR
-          louie@example.com
-
- * To list space users, run: - - ``` - cf space-users ORG SPACE - ``` - Where: - - - The above command returns output similar to the example below: - 
-        Getting users in org example-org / space example-space as username@example.com...
-
-        SPACE MANAGER
-          username@example.com
-
-        SPACE DEVELOPER
-          huey@example.com
-          dewey@example.com
-
-        SPACE AUDITOR
-          louie@example.com
-
- -For more information about the `cf org-users` command, use `cf org-users --help`. For -more information about the `cf space-users` command, use `cf space-users --help`. - -### Manage roles - -You use the commands listed below to manage roles in the cf CLI. These commands require admin permissions and take `username`, `org` or `space`, and `role` as -arguments: - -* `cf set-org-role`
For more information, use `cf set-org-role --help`. - -* `cf unset-org-role`
For more information, use `cf unset-org-role --help`. - -* `cf set-space-role`
For more information, use `cf set-space-role --help`. - -* `cf unset-space-role`
For more information, use `cf unset-space-role --help`. - -The available roles are: - -* `OrgManager` -* `BillingManager` -* `OrgAuditor` -* `SpaceManager` -* `SpaceDeveloper` -* `SpaceAuditor` - -For more information about user roles, see [Orgs, Spaces, Roles, and Permissions](../concepts/roles.html). - -The following example shows the terminal output for `cf set-org-role huey@example.com example-org OrgManager`, which assigns the Org Manager role to -`huey@example.com` within the `example-org` org: +The following example assigns the Org Manager role to `huey@example.com` in `example-org`: 
+$ cf set-org-role huey@example.com example-org OrgManager
 Assigning role OrgManager to user huey@example.com in org example-org as username@example.com...
 OK

-If you are not an admin, you see this message when you try to run these commands: error code: 10003, message: You -are not authorized to perform the requested action

- -### Manage roles for users with identical usernames in multiple origins - -If a username corresponds to multiple accounts from different user stores, such as both the internal UAA store and an external SAML or LDAP store, running -either `cf set-org-role` or `cf unset-org-role` returns an error similar to the following example: - -
The user exists in multiple origins. Specify an origin for the requested user from: ‘uaa’, ‘other’
- -To resolve this ambiguity, you can construct a `curl` command that uses the API to perform the desired role management function. For an example, see the -[Cloud Foundry API documentation](https://v3-apidocs.cloudfoundry.org/version/3.169.0/index.html#create-a-role). +If you are not an admin, you see this message when you try to run these commands: error code: 10003, message: You are not authorized to perform the requested action

## Push an app