Synchronize Tricentis User Administration with Tosca Commander

Tricentis User Administration allows you to centrally manage users across multiple projects. This saves you time and effort as your testing projects scale.

Any user who's part of a user group that you have assigned to a project has full access to all objects in this project. If you want to adjust rights and permissions, you can synchronize Tricentis User Administration with Tosca Commander. This brings your Tricentis User Administration users into Tosca Commander, where you can restrict their access to test objects.

Note: this is only possible if you use Tricentis User Administration for authorization.

What's in this topic?

This topic is for administrators. It has all the information you need to complete the following tasks: 

• Synchronize your Tricentis User Administration with Tosca Commander.

• Manage these users in Tosca Commander.

Synchronize users

Synchronizing users brings your Tricentis User Administration users into Tosca Commander. This allows you to fine-tune who has access to which test objects in the project. The synchronization is a one-off operation; if anything changes in Tricentis User Administration, you need to synchronize again to update in Tosca Commander.

To synchronize with Tosca Commander, follow these steps:

1. Make sure you have assigned user groups to the project you want to synchronize.

2. Open any Tricentis Server Repository workspace that's connected to the project. If you don't have one yet, create one.

3. Go to Project->Settings->Tricentis Services and enter the endpoint of Tosca Gateway Service.

4. Check out the project root element.

5. Right-click the project root element and select Sync Users from Tosca Server from the context menu.

6. Sign in to Tricentis User Administration in the subsequent dialog, if you aren't signed in yet.

Once you're signed in, Tricentis User Administration synchronizes with Tosca Commander.

Objects in Tosca Commander

After the synchronization, you can see the following objects in the Usermanagement tab:

• A second Admins group that contains all Tricentis User Administration administrators.

• A user in the All Users group for every Tricentis User Administration user that's part of an assigned user group, as well as administrators.

  Note: if you use Active Directory or Single Sign-On, you only see these users after they have signed in for the first time.

• A separate Tosca Commander user group for every Tricentis User Administration user group that's assigned to this project, including child groups. Tosca Commander also lists child groups hierarchically under their parent. This ensures that you can let child groups inherit their parents' rights or define different rights for them.

Manage synchronized users in Tosca Commander

Any user who's part of a user group that you have assigned to a project has full access to all objects in this project. The synchronization with Tosca Commander imports your Tricentis User Administration users into a specific repository. You can then adjust who has access to which test objects in this repository.

However, Tricentis User Administration is still your main user management tool. There are restrictions on what you can or can't do with your users in Tosca Commander:

• You can set viewing and owning rights for user groups. This defines who can see and change which test objects.

• You can create users and groups directly in Tosca Commander, but this information doesn't transfer back to Tricentis User Administration. So if you want to give these users access to another project, you have to create them again, in the other repository. It's better if you create all users and groups in Tricentis User Administration. Then you can synchronize them with the other repository if you want to set specific rights.

• You can't reorganize Tricentis User Administration groups in Tosca Commander.

• You can't add Tricentis User Administration users to groups that you create in Tosca Commander. You need to create and manage groups directly in Tricentis User Administration.

• You can't change names and passwords of Tricentis User Administration users in Tosca Commander. Instead, you manage user credentials directly in Tricentis User Administration.

Remove users

As it's the case with Tosca Commander user management, you can't delete users from a project. Tosca doesn't support this because it causes data inconsistencies in different versions. So if you assign a group to a project, synchronize with Tosca Commander, and then remove the group from the project, you still see these users in Tosca Commander. However, they show as disabled and don't have access to the project.

What's next

Check out the administrator workflow to see if you need to go back and change anything in Tricentis User Administration. You might need to add more users or organize additional groups.