Create Your First User

Managing users and permissions is essential for team collaboration. This guide helps you add team members and configure their access.

User Management Overview

CloudRepo provides flexible user management:

  • Individual Users - Direct access with specific permissions

  • Groups - Organize users for easier permission management

  • API Keys - Automated access for CI/CD systems

  • Roles - Predefined permission sets

Adding a New User

Step 1: Access User Management

  1. Log into CloudRepo dashboard

  2. Navigate to “Users” section

  3. Click “Invite User”

Step 2: Configure User Details

  1. Email Address: Enter the user’s email

  2. Display Name: Optional friendly name

  3. Role: Select initial role:

    • Admin - Full access to all features

    • Developer - Read/write to assigned repositories

    • Reader - Read-only access

Step 3: Assign Repository Access

  1. Select repositories the user can access

  2. Set permissions per repository:

    • Read - Download artifacts

    • Write - Upload artifacts

    • Admin - Manage repository settings

Step 4: Send Invitation

  1. Review user configuration

  2. Click “Send Invitation”

  3. User receives email with setup instructions

Setting Up Groups

Groups simplify permission management for teams:

Creating a Group

  1. Go to “Users” → “Groups”

  2. Click “Create Group”

  3. Name your group (e.g., “backend-team”)

  4. Add users to the group

  5. Assign repository permissions to the group

Example Group Configuration

Group Name: backend-team
Members: alice@example.com, bob@example.com
Permissions:
  - maven-releases: Read, Write
  - maven-snapshots: Read, Write
  - docker-images: Read

API Keys for Automation

API keys enable automated access for CI/CD:

Creating an API Key

  1. Navigate to “Users” → “API Keys”

  2. Click “Generate API Key”

  3. Configure:

    • Name: Descriptive name (e.g., “jenkins-deploy”)

    • Permissions: Repository access rights

    • Expiration: Optional expiry date

  4. Copy and secure the generated key

Using API Keys

Maven settings.xml:

<server>
    <id>cloudrepo</id>
    <username>api-key</username>
    <password>${env.CLOUDREPO_API_KEY}</password>
</server>

Python .pypirc:

[cloudrepo]
repository = https://[org-id].cloudrepo.io/repository/pypi
username = api-key
password = your-api-key-here

Best Practices

Security Recommendations

  1. Principle of Least Privilege: Grant minimal required permissions

  2. Regular Audits: Review user access quarterly

  3. API Key Rotation: Rotate keys periodically

  4. Two-Factor Authentication: Require for admin users

Permission Guidelines

  • Production Repositories: Limit write access to CI/CD and release managers

  • Development Repositories: Broader write access for development team

  • Public Repositories: Carefully review before making public

User Onboarding Checklist

For each new user:

  1. ✓ Send invitation with clear instructions

  2. ✓ Provide repository URLs and configuration examples

  3. ✓ Share team conventions and naming standards

  4. ✓ Set up development environment together

  5. ✓ Verify first successful upload/download

Managing Existing Users

Modifying Permissions

  1. Go to “Users”

  2. Click on user’s email

  3. Update roles or repository access

  4. Save changes (immediate effect)

Removing Users

  1. Navigate to user profile

  2. Click “Deactivate User”

  3. Confirm removal

  4. User’s API keys are automatically revoked

Troubleshooting Access Issues

Common problems and solutions:

  • User Can’t Log In: Check invitation status, resend if needed

  • 403 Forbidden on Upload: Verify write permissions for repository

  • API Key Not Working: Check expiration and repository assignments

  • Missing Repository: Ensure user or group has read access

Next Steps