Introduction
Usage
To enable your users to access the services offered by Nameshield, you must first create a user and then add accesses to this user.
When creating an access, you can define to which customer/subsidiary it belongs, and which roles/permissions are associated with it.
Roles allow you to specify which actions your user can perform using his access (ordering domain names, modifying DNS
zones, etc.).
However, you can only give roles that you already have on your access.
These roles are visible in the role list entry.
Access Types
A user can only have one UI connection or SSO connection access
UI connection
This access type allows your user to connect to the Nameshield website.
When the access is created, a login will be assigned and must be communicated to the user.
A password initialization procedure will be emailed to the user.
You can also require that access to be secured by two-factor authentication.
In this case, once the user has defined his password, he will be asked to configure two-factor authentication on his
access.
SSO connection
This access type allows your user to connect to the Nameshield website using your SSO.
You will be asked for the access ID on your SSO.
API connection
This type of access enables your user to use the APIs offered by Nameshield.
Access to the APIs is subject to the assignment of one or more roles.
For instance, to access the DNS API you'll need to assign the role CLIENTNMS_WEBSERVICE_DNS_R
or CLIENTNMS_WEBSERVICE_DNS_RW to the access.
Profile
Profiles are available after logging on to the Nameshield website (via UI or SSO
connection).
After logging in, the user is redirected to a page enabling him/her to select a profile from the various profiles
associated with him/her.
Profiles allow users to have different roles/permissions depending on the subsidiary.