Manage users and accounts

Overview

This document explains how to manage users and accounts in F5 NGINXaaS for Google Cloud using the NGINXaaS console.

Before you start, ensure you understand the following concepts:

• NGINXaaS Account: An NGINXaaS Account is created when you subscribe to F5 NGINXaaS for Google Cloud via the Google Cloud Marketplace, as described in prerequisites. You may create multiple NGINXaaS Accounts by signing up with different GCP billing accounts.
• User: NGINXaaS Users are granted access to all resources in the NGINXaaS Account. User authentication is performed securely via Google Cloud, requiring a matching identity. Individuals can be added as users to multiple NGINXaaS Accounts, and can switch between them using the steps documented below.
• Authorized Domains: The list of domains allowed to authenticate into the NGINXaaS Account using Google authentication.
  • This can be used to restrict access to Google identities within your Google Cloud Organization or Google Workspace, or other known, trusted Workspaces. For example, your Google Cloud Organization may have users created under the example.com domain. By setting the Authorized Domains in your NGINXaaS Account to only allow example.com, users attempting to log in with the same email associated with alternative.net Google Workspace would not be authenticated.
  • By default, an NGINXaaS Account has an empty authorized domains list, which accepts matching users from any Google Workspace.

Add or edit a user

An existing NGINXaaS Account user can add additional users following these steps:

1. Access the NGINXaaS Console.
2. Log in to the console with your Google credentials.
3. Navigate to Users page on the left menu, then select Add User.
4. Enter the Email address for the user to be added. The email must match the individual’s Google User to be able to authenticate successfully.
5. Select Create User to save the changes.

The new user will appear in the list of users on the Users page. Their Google Identity Domain will remain empty until they log in for the first time.

Modify account settings

As an authenticated user, you may modify the authorized domains and name of an NGINXaaS Account.

Modify Authorized Domains

1. Select Account Details under the Settings section on the left menu.
2. Select Edit in the Authorized Domains section.
3. To add a new authorized domain, select Add Domain and enter the new domain.
4. To remove an existing authorized domain, select the Recycle Bin button next to it.
5. Select Update to save changes.

You cannot remove an authorized domain from the list if it matches an existing user’s Google Identity Domain. To remove access from that domain you must first delete every NGINXaaS user that is associated with the domain.

Modify the name of an account

1. Select Account Details under the Settings section on the left menu.
2. Select Edit in the Account Info section.
3. Enter new name in Account Name field, then select Update to save changes.

Switch accounts

To switch to a different NGINXaaS Account, select the profile symbol in the top right corner and choose Switch Account. This opens a page showing the list of all the NGINXaaS Accounts that your Google Identity is linked to; select the account you want to switch to.

Delete a user

An authenticated user can delete other users (other than their own user account). Deletion is irreversible; the deleted user will no longer be able to access the NGINXaaS Account.

To delete a user in an NGINXaaS Account:

1. Select Account Details under the Settings section on the left menu.
2. Select the ellipsis (three dots) menu next to the user you want to delete.
3. Select Delete in the menu. The deleted user will no longer appear in the Users page.

What’s next

Add certificates using the NGINXaaS Console