Skip to content

Commit

Permalink
Merge pull request #1993 from EnterpriseDB/docs/biganimal-more-fixes
Browse files Browse the repository at this point in the history
rebranding fixes
  • Loading branch information
drothery-edb authored Nov 2, 2021
2 parents 52429e6 + c4a06f3 commit a6e0276
Show file tree
Hide file tree
Showing 7 changed files with 32 additions and 32 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -2,18 +2,18 @@
title: "Managing portal access"
---

EDB Cloud uses Azure Active Directory (AD) to authenticate users and role based access controls to grant users access to different parts of the application.
BigAnimal uses Azure Active Directory (AD) to authenticate users and role based access controls to grant users access to different parts of the application.

## Organizations

Each subscribed customer has a unique *organization*. Each organization’s database clusters are deployed and managed in the customer's cloud account. This ensures complete segregation of customer data between organizations.

Each EDB Cloud organization is associated with an Azure AD tenant. Azure AD establishes the identity of users that belong to an organization. After Azure AD is linked during subscription, users that belong to that AD can login with minimum access privileges.
Each BigAnimal organization is associated with an Azure AD tenant. Azure AD establishes the identity of users that belong to an organization. After Azure AD is linked during subscription, users that belong to that AD can login with minimum access privileges.

EDB Cloud supports role based access control policies. A user with the owner role may assign roles to other users in the same organization.
BigAnimal supports role based access control policies. A user with the owner role may assign roles to other users in the same organization.

## Roles
Access to EDB Cloud is controlled by roles. Roles are sets of permissions. You use roles to manage permissions assigned to users.
Access to BigAnimal is controlled by roles. Roles are sets of permissions. You use roles to manage permissions assigned to users.

* Each organization will have three default roles available:
* owner
Expand Down Expand Up @@ -81,7 +81,7 @@ To change permissions associated with the role:

## Users

When you configured your Azure subscription, you also enabled EDB Cloud to authenticate users from your organization using Azure AD. Before users become visible in the EDB Cloud **Users** screen they need to sign in using Azure AD after receiving special emails sent by your organization. New users signed in to EDB Cloud have a minimum set of permissions until you assign them a role.
When you configured your Azure subscription, you also enabled BigAnimal to authenticate users from your organization using Azure AD. Before users become visible in the BigAnimal **Users** screen they need to sign in using Azure AD after receiving special emails sent by your organization. New users signed in to BigAnimal have a minimum set of permissions until you assign them a role.

### Assigning roles to users
To assign appropriate roles to users:
Expand All @@ -93,7 +93,7 @@ To assign appropriate roles to users:
5. Select **Submit**.

!!! Note
For a user's role assignment to take effect, the user needs to log out from EDB Cloud and log in again.
For a user's role assignment to take effect, the user needs to log out from BigAnimal and log in again.

### Viewing users

Expand All @@ -105,10 +105,10 @@ To view all users from your organization that have logged in at least once:

## Example scenario

1. The EDB Cloud organization is created, and Tom logs in and is granted the owner role.
1. The BigAnimal organization is created, and Tom logs in and is granted the owner role.

2. Tom asks Jerry to log in, using his Azure AD account; Jerry's account in EDB Cloud is created.
3. Tom grants Sally the contributor role. Sally logs out and back in, and she can now create EDB Cloud clusters.
2. Tom asks Jerry to log in, using his Azure AD account; Jerry's account in BigAnimal is created.
3. Tom grants Sally the contributor role. Sally logs out and back in, and she can now create BigAnimal clusters.
4. Sally asks Jerry to log in, and grants him the reader role.
5. Jerry logs out and back in, and he can now see the clusters that Sally has created.

Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "Reviewing account activity"
---
The activity log collects EDB Cloud events based on user activity within the portal. It can be used to audit activities performed by users from your organizations or research activities that may have affected your account.
The activity log collects BigAnimal events based on user activity within the portal. It can be used to audit activities performed by users from your organizations or research activities that may have affected your account.

## Events

Expand All @@ -24,7 +24,7 @@ Events are related to the following resource types:

## Viewing and searching the activity log

To view events, navigate to the [**Activity Log**](https://portal.edbcloud.com/activityLog) page on the [EDB Cloud](https://portal.edbcloud.com) portal. To search events, use the filters at the top of the page.
To view events, navigate to the [**Activity Log**](https://portal.biganimal.com/activityLog) page on the [BigAnimal](https://portal.biganimal.com) portal. To search events, use the filters at the top of the page.

The following fields are in the activity log:

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,4 +2,4 @@
title: "Administering your account"
---

In this section, account owners can find information on administrative activities for the EDB Cloud account including portal and database user access management as well as account activity reviews.
In this section, account owners can find information on administrative activities for the BigAnimal account including portal and database user access management as well as account activity reviews.
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
---
title: "Connecting your EDB Cloud account"
title: "Connecting your BigAnimal account"
---

This topic describes how to set up your EDB Cloud account on Azure Marketplace. Your Azure subscription for EDB Cloud is where you create and manage Postgres clusters.
This topic describes how to set up your BigAnimal account on Azure Marketplace. Your Azure subscription for BigAnimal is where you create and manage Postgres clusters.

## Before you connect your cloud account

Expand All @@ -26,7 +26,7 @@ This topic describes how to set up your EDB Cloud account on Azure Marketplace.
To create an Azure AD Application:

1. Register an application with Azure AD and create a service principal. See [Register an application with Azure AD and create a service principal](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#register-an-application-with-azure-ad-and-create-a-service-principal) for instructions.
Take note of the **Application (client) ID**, you need it to configure your EDB cloud account. Also take note of the **Display name** of the Azure AD application. You need to enter the **Display name** _as is_ in the next step of this procedure.
Take note of the **Application (client) ID**, you need it to configure your BigAnimal account. Also take note of the **Display name** of the Azure AD application. You need to enter the **Display name** _as is_ in the next step of this procedure.

1. Choose _application secret_ as an authentication option for the application. See [Create a new Azure AD application secret](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#option-2-create-a-new-application-secret) for instructions. Take note of the Azure AD App Secret, you need it to configure your cloud account.
1. Assign the owner role to the application. See [Assign a role to the application](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#assign-a-role-to-the-application) for instructions. Enter the **Display name** of the Azure AD application in the **Select** field of the **Add role assignment** panel. See [Open the Add role assignment pane](https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?tabs=current#step-2-open-the-add-role-assignment-pane) for instructions.
Expand All @@ -47,7 +47,7 @@ Flag and option details:
| Flag/option shortcut | Flag/option long name | Description |
| -------------------- | --------------------- | ----------- |
| -d *NAME* | --display-name *NAME* | Name of Azure AD Application |
| -s *SUBSCRIPTION_ID* | --subscription *SUBSCRIPTION_ID* | Azure Subscription ID used by EDB Cloud |
| -s *SUBSCRIPTION_ID* | --subscription *SUBSCRIPTION_ID* | Azure Subscription ID used by BigAnimal |
| -y *YEARS* | --years *YEARS* | Integer value specifying the number of years for which the credentials are valid. The default is one year. |
| -h | --help | Displays information on the syntax and usage of the script. |

Expand Down Expand Up @@ -103,7 +103,7 @@ To connect your cloud account with your Azure subscription:
#### 4. Configure your account.
!!! Note
After step 1 you are prompted for approval by an Azure AD global administrator.
1. Select **Configure account now** to configure EDB Cloud to use your Azure subscription and your Azure AD Application.
1. Select **Configure account now** to configure BigAnimal to use your Azure subscription and your Azure AD Application.


2. Fill in the following parameters in the form:
Expand All @@ -112,20 +112,20 @@ To connect your cloud account with your Azure subscription:
| ---------------------------------------------------- | ---------------------------------------------------------------------------- |
| **Azure AD: Application Client ID** | Application client ID you noted when [creating your Azure AD Application](#create-azure-ad-application) or that was generated from the [`create-spn`](#create-azure-active-directory-application-using-create-spn) script.|
| **Azure AD: Application Client Secret Value** | Application client secret value you noted when [creating your Azure AD Application](#create-azure-ad-application) or that was generated from the [`create-spn`](#create-azure-active-directory-application-using-create-spn) script.|
| **Azure Subscription ID** | Azure subscription ID for EDB Cloud available from the Subscriptions page of your Azure account. |
| **Your EDB Cloud Organization Name** | SaaS Subscription Name you assigned as your EDB Cloud Organization (see [Step 2. Fill out the details for your plan.](#2-fill-out-the-details-for-your-plan)) |
| **Azure Subscription ID** | Azure subscription ID for BigAnimal available from the Subscriptions page of your Azure account. |
| **Your BigAnimal Organization Name** | SaaS Subscription Name you assigned as your BigAnimal Organization (see [Step 2. Fill out the details for your plan.](#2-fill-out-the-details-for-your-plan)) |

11. Select **Submit.**

## What's next

### Login

You can now log in to your EDB Cloud account using your Azure AD identity if you filled in the parameters correctly.
You can now log in to your BigAnimal account using your Azure AD identity if you filled in the parameters correctly.

### Invite users

You can invite new users by sharing the link to the EDB Cloud portal and having them log in with their Microsoft Azure Active Directory account. New users are not assigned any roles by default. After they log in the first time, you see them in the User list and are able to assign them a role with permissions to EDB Cloud. See [Assigning roles to users](../administering_cluster/01_portal_access/#assigning-roles-to-users) for instructions.
You can invite new users by sharing the link to the BigAnimal portal and having them log in with their Microsoft Azure Active Directory account. New users are not assigned any roles by default. After they log in the first time, you see them in the User list and are able to assign them a role with permissions to BigAnimal. See [Assigning roles to users](../administering_cluster/01_portal_access/#assigning-roles-to-users) for instructions.

!!! Note
Azure AD email domain will likely be different than the email domain regularly used by your organization.
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ Prior to creating your cluster, make sure you have adequate Azure resources or y

To create a cluster:

1. Sign in to the [EDB Cloud](https://portal.edbcloud.com) portal.
1. Sign in to the [BigAnimal](https://portal.biganimal.com) portal.

3. Select **Create New Cluster** in the top right of the **Overview** page or **Clusters** page. The **Create Cluster** page opens.
4. Specify the cluster settings on the following tabs of the **Create Cluster** page:
Expand Down Expand Up @@ -48,7 +48,7 @@ To create a cluster:
4. In the the **Instance Type** section, select the number of vCPUs and amount of memory you desire.
5. In the **Storage** section, select **Volume Type**, and in **Volume Properties** the type and amount of storage needed for your cluster.
!!! Note
EDB Cloud currently supports Azure Premium SSD storage types. See [the Azure documentation](https://docs.microsoft.com/en-us/azure/virtual-machines/disks-types#premium-ssd) for more information.
BigAnimal currently supports Azure Premium SSD storage types. See [the Azure documentation](https://docs.microsoft.com/en-us/azure/virtual-machines/disks-types#premium-ssd) for more information.
6. In the **Networking** section, you specify whether to use private or public networking. Networking is set to Public by default. Public means that any client can connect to your cluster’s public IP address over the internet.
Private networking allows only IP addresses within your private network to connect to your cluster. See [Cluster networking architecture](01_cluster_networking) for more information.
7. To optionally make updates to your database configuration parameters, select **Next: DB Configuration**.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,6 @@ title: "Getting started"
indexCards: simple
---

In this section, Azure subscription administrators can learn how to initially set up their EDB Cloud account, invite others to join them in exploring what EDB has to offer, and create initial clusters as an account owner so that development can begin.
In this section, Azure subscription administrators can learn how to initially set up their BigAnimal account, invite others to join them in exploring what EDB has to offer, and create initial clusters as an account owner so that development can begin.


Original file line number Diff line number Diff line change
Expand Up @@ -11,19 +11,19 @@ You can connect to your cluster using [`psql`](http://postgresguide.com/utilitie

## Using `psql`
To connect to your cluster using `psql`:
1. Sign in to the [EDB Cloud](https://portal.edbcloud.com) portal.
1. Sign in to the [BigAnimal](https://portal.biganimal.com) portal.

1. Go to the [**Clusters**](https://portal.edbcloud.com/clusters) page.
1. Go to the [**Clusters**](https://portal.biganimal.com/clusters) page.

3. Select the name of your cluster.
4. On the **Overview** tab, select the copy icon to the right of the **Quick Connect** field to copy the command for connecting to your cluster using `psql` to your clipboard. `psql` will prompt for the edb_admin user password you selected at cluster creation time.
5. Paste the command in your terminal.

## Using another client
To connect to your cluster using a client other than `psql`:
1. Sign in to the [EDB Cloud](https://portal.edbcloud.com) portal.
1. Sign in to the [BigAnimal](https://portal.biganimal.com) portal.

1. Go to the [**Clusters**](https://portal.edbcloud.com/clusters) page.
1. Go to the [**Clusters**](https://portal.biganimal.com/clusters) page.

2. Select the name of your cluster.
3. Select the **Connect** tab. You can review and copy all the relevant information you need from this screen except for the edb_admin user password. Please consult the client driver documentation for the connection string format the driver uses.
Expand All @@ -32,17 +32,17 @@ To connect to your cluster using a client other than `psql`:

Different clients can have different default TLS/SSL modes (sslmode). For example, `psql` defaults to `prefer`, which means the client will attempt to establish a TLS connection but fall back to non-TLS if the server does not support it. In the `psql` example provided by EDB in the **Quick Connect** field, `sslmode` is explicitly set to `require`, which means the client will attempt a TLS connection and fail if the connection to the server can't be encrypted.

For public connections and in most environments, EDB recommends setting `sslmode` to `verify-full`. This ensures that you connect to the server you specified and that the connection is encrypted. EDB Cloud generates certificates with LetsEncrypt, a widely trusted certificate authority. Your client machine may already have a bundled CA certificate for LetsEncrypt, for example, at `/etc/ssl/certs/ca-certificates.crt` or `/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem`. If it doesn't, your client machine needs a [CA certificate for Let's Encrypt](https://letsencrypt.org/certificates/). Once the CA certificate is in place on your client machine, configure the `sslrootcert` parameter to its location and set the `sslmode` parameter to `verify-full` to verify the certificate to fully validate the connection:
For public connections and in most environments, EDB recommends setting `sslmode` to `verify-full`. This ensures that you connect to the server you specified and that the connection is encrypted. BigAnimal generates certificates with LetsEncrypt, a widely trusted certificate authority. Your client machine may already have a bundled CA certificate for LetsEncrypt, for example, at `/etc/ssl/certs/ca-certificates.crt` or `/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem`. If it doesn't, your client machine needs a [CA certificate for Let's Encrypt](https://letsencrypt.org/certificates/). Once the CA certificate is in place on your client machine, configure the `sslrootcert` parameter to its location and set the `sslmode` parameter to `verify-full` to verify the certificate to fully validate the connection:

```
psql -W "postgres://[email protected].edbcloud.io:5432/edb_admin?sslmode=verify-full&sslrootcert=/usr/share/ca-certificates/isrgrootx1.pem"
psql -W "postgres://[email protected].biganimal.io:5432/edb_admin?sslmode=verify-full&sslrootcert=/usr/share/ca-certificates/isrgrootx1.pem"
```

Once connected to the cluster using `psql`, the `conninfo` meta-command shows the encryption protocol being used for communication. In the case of EDB Cloud, TLS (v1.2+) is supported:
Once connected to the cluster using `psql`, the `conninfo` meta-command shows the encryption protocol being used for communication. In the case of BigAnimal, TLS (v1.2+) is supported:

```
edb_admin=> \conninfo
You are connected to database "edb_admin" as user "edb_admin" on host "xxxxxxxxx.xxxxx.edbcloud.io" at port "5432".
You are connected to database "edb_admin" as user "edb_admin" on host "xxxxxxxxx.xxxxx.biganimal.io" at port "5432".
SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, bits: 256, compression: off)
```

Expand Down

0 comments on commit a6e0276

Please sign in to comment.