Users And Groups

Create groups, add users, and configure service users in Admin Central.

Open Admin Central

1. Sign in to xDP and open Settings in the sidebar.

2. Select Admin Central, then click Go to Admin Central.

3. Sign in again if the portal prompts you.

Admin Central tabs for identity and access: Users, Groups, Tenant roles, and Domain roles.

Create groups

Create three groups for your tenant:

1. In Admin Central, open Management → Groups.

2. Click Create Group.

3. Create Admin, Contributor, and Viewer (one group at a time).

4. Save each group.

Assign roles to groups

Assign a tenant role to each group on the xDP product tab. See Roles and Permissions for the mapping and permission details.

1. Open Management → Groups and select a group.

2. In the group profile, open Tenant Roles.

3. Select the xDP tab when both xDP and Acceldata Cloud (ADOC) are enabled.

4. Assign the role:

   • Admin → Tenant Admin

   • Contributor → Editor

   • Viewer → Viewer

5. Save and repeat for the other groups.

Add users to groups

1. Open Management → Users.

2. Select a user (or create one).

3. In Groups, add Admin, Contributor, or Viewer as appropriate.

4. Save the user profile.

Alternatively, add members from the group profile under Management → Groups.

Users inherit the tenant roles assigned to their groups. After group or role changes, ask the user to refresh xDP or sign in again.

Service users

Two flows apply depending on which service user you are working with:

Default service user — cluster creation

Each tenant is provisioned with a default service user named dataplane-service-user. xCentral, xStore, and xCompute cluster creation use this identity — you do not create it.

Configure its roles before creating any cluster.

This service user is a non-human identity used during cluster creation and ongoing cluster operations.

Minimum requirements for cluster creation

Assign tenant roles on both the ADOC and xDP tabs for dataplane-service-user.

ADOC — minimum permissions

Create or assign an ADOC tenant role with the minimum Administration permissions below, then assign it to dataplane-service-user on the ADOC tab.

xDP — cluster creation

On the xDP tab, assign Tenant Admin to dataplane-service-user. This grants the xDP permissions needed for cluster creation.

Configure the default service user

1. In Admin Central, open Service Users.

2. Select dataplane-service-user.

3. Under Tenant Roles, assign:

   • ADOC tab — the role with the minimum Administration permissions above

   • xDP tab — Tenant Admin

4. Save the service user before creating any cluster.

Note: Cluster creation resolves dataplane-service-user by name. If the user is missing or lacks the required roles, cluster creation fails — verify the user exists and both role assignments are saved.

Create a custom service user (optional)

Use this flow when a new service user is needed — not for dataplane-service-user, which is created automatically with the tenant.

Example name: pipeline-automation-svc (not dataplane-service-user, which is reserved for the default cluster-creation identity).

1. In Admin Central, open Service Users.

2. Click Create Service User.

3. Enter a name (for example pipeline-automation-svc) and optional description.

4. Under Tenant Roles, assign only the roles that workload needs on the ADOC and xDP tabs.

5. Save the service user.

Grant pipeline-automation-svc the minimum permissions its workload requires — do not assign Tenant Admin unless that workload truly needs full xDP access.

Troubleshooting

User cannot see an expected xDP section

1. Confirm the user belongs to the correct group under Management → Users.

2. Open the group and verify the xDP tenant role is assigned.

3. Have the user refresh xDP or sign in again.

Cluster creation fails on service user

1. Confirm dataplane-service-user exists under Service Users.

2. Confirm the ADOC role includes Service User Management, User Management, and API Keys permissions.

3. Confirm Tenant Admin is assigned on the xDP tab.

4. Retry cluster creation.