update

Author: Nivedithaa Mahendran

bin/mas-devops-create-initial-users-for-saas

@@ -34,7 +34,7 @@ if __name__ == "__main__":
     parser.add_argument("--coreapi-port", required=False, default=443)
     parser.add_argument("--admin-dashboard-port", required=False, default=443)
     parser.add_argument("--manage-api-port", required=False, default=443)
-    parser.add_argument("--mas_version", required=False, default="9.1")
+    parser.add_argument("--mas-version", required=False, default="9.0")
 
     group = parser.add_mutually_exclusive_group(required=True)
     group.add_argument("--initial-users-yaml-file")
@@ -68,7 +68,7 @@ if __name__ == "__main__":
     logger.info("--------------")
     logger.info(f"mas_instance_id:           {mas_instance_id}")
     logger.info(f"mas_workspace_id:          {mas_workspace_id}")
-    logger.info(msg=f"mas_version:               {mas_version}")
+    logger.info(f"mas_version:               {mas_version}")
     logger.info(f"initial_users_yaml_file:   {initial_users_yaml_file}")
     logger.info(f"initial_users_secret_name: {initial_users_secret_name}")
     logger.info(f"log_level:                 {log_level}")

src/mas/devops/users.py

@@ -970,7 +970,6 @@ def create_or_get_manage_api_key_for_user(self, user_id, temporary=False):
         # otherwise, retrieve the apikey (either it already existed, or we just created it)
 
         apikey = self.get_manage_api_key_for_user(user_id)
-        self.logger.info(f"Retrieved Manage API Key for user {user_id}: {apikey}")
         if apikey is None:
             # either create call reported that apikey already exists, or we created the api key
             # so we expect the get call to find it
@@ -1203,8 +1202,6 @@ def add_user_to_manage_group(self, user_id, group_name, manage_api_key):
             json=payload,
             verify=self.manage_internal_ca_pem_file_path,
         )
-        self.logger.info(f"Response status code: {response.status_code}")
-        self.logger.info(f"Response text: {response.text}")
         if response.status_code == 204:
             return None
 
@@ -1505,13 +1502,19 @@ def create_initial_user_for_saas(self, user, user_type, groupreassign=None):
             Exception: If required fields are missing or user creation fails.
 
         Note:
+            For version < 9.1,
             PRIMARY users get:
             - userAdmin permission
+            - PREMIUM application entitlement
+            - Workspace admin access
+            - ADMIN role for most apps, MANAGEUSER for Manage
+            - MAXADMIN security group membership
+
+            For version >= 9.1,
+            PRIMARY users get:
             - apikeyAdmin permission (API Key Management)
             - idpAdmin permission (IDP Management)
-            - PREMIUM application entitlement
             - Regular workspace access (not workspace admin)
-            - ADMIN role for most apps, MANAGEUSER for Manage
             - USERMANAGEMENT security group membership
             - Group reassignment authorization for ALL security groups