manifest-users.md

# Provisioning and Managing users in Manifest
- [Adding Users to Manifest](#adding-users-to-manifest)
- [Creating a New Manifest Group](#creating-a-new-manifest-group)
- [Removing Users from Manifest Groups](#creating-a-new-manifest-group)

# Adding Users to Manifest

DoIT EI uses Manifest groups to give teams access to the UW-Madison IICS environment.

1. Add your team member(s) to the manifest group. Please read the documentation on [Managing Manifest Group Members](https://kb.wisc.edu/page.php?id=25882).
2. Have your team members log into test and production. Please read the documentation on [Logging in to IICS](https://git.doit.wisc.edu/interop/iics/external-iics-docs/-/blob/master/docs/logging-in.md).
3. Notify our team at integration-platform@doit.wisc.edu once all group members have logged in to both orgs at least once. No further action on your part is required after this. We will need to provision your users to their user group within IICS manually. This must be done by a member of the Integration Team or another IICS admin.

# Creating a New Manifest Group

Manifest groups do not automatically have access to IICS, as these permissions must be provisioned by the Integration Team.

1. Create a Manifest Folder / Choose an existing Manifest Folder. A Manifest Folder is a prerequisite to creating a Manifest Group. If you do not have (or wish to use) an existing Manifest Folder, please refer to documentation on [How to Create a Manifest Folder](https://kb.wisc.edu/page.php?id=27783).
2. Create a Manifest Group. Follow this documentation on how to [Create a Group](https://kb.wisc.edu/page.php?id=25878).
    * To keep the group easily identified, we recommend prefixing the name of the Group with the name of your department (e.g. "DoIT-AIS-Enterprise-Integration-IICS"). See the documentation on [Manifest Group and Folder Naming Advice and Philosophy](https://kb.wisc.edu/page.php?id=84828).
3. Grant Read and View privileges for your new Manifest Group to our team's group, uw:org:ais:ais-admins. This will allow our team to view the names of members in your group so that we know to set up their accounts in IICS. [Follow These Instructions](https://kb.wisc.edu/25880).
4. Email our team at integration-platform@doit.wisc.edu with the Manifest group path (e.g. uw:org:ais:DoIT-AIS-Enterprise-Integration-IICS). We will be able to permit your team members access to IICS.
    * We will also provide you with your IICS User Group name which you will use to restrict access to your team's assets in IICS. Please refer to [Documentation on User Groups](best-practices.md#use-user-groups-to-control-access).
5. Add users to the Manifest Group. View the [Instructions Above](#adding-users-to-manifest).
6. Wait for a response from our team. Once we have provided your Manifest group access to IICS we will let you know.

# Removing Users from Manifest Groups

1. To remove an IICS user from your IICS User Group, delete the member in your Manifest Group. Please read the document on [Managing Manifest Group Members](https://kb.wisc.edu/page.php?id=25882).
2. Once you have removed the required members email integration-platform@doit.wisc.edu with the IICS User Group name, and the NetId of the member to remove. DoIT EI will notify you when we have removed the user from your IICS User Group.