From 3b263a93b9ce3662f3070c78fddb6e3fc2e82937 Mon Sep 17 00:00:00 2001 From: Nicola Puppa Date: Tue, 18 Mar 2025 12:42:01 +0100 Subject: [PATCH 1/9] docs: add authorization user guide --- .../img/create-authorization-tab.png | Bin 0 -> 46630 bytes .../orchestration-identity/installation.md | 2 +- .../user-guide/authorization.md | 51 ++++++++++++++++++ sidebars.js | 5 ++ 4 files changed, 57 insertions(+), 1 deletion(-) create mode 100644 docs/self-managed/identity/orchestration-identity/img/create-authorization-tab.png create mode 100644 docs/self-managed/identity/orchestration-identity/user-guide/authorization.md diff --git a/docs/self-managed/identity/orchestration-identity/img/create-authorization-tab.png b/docs/self-managed/identity/orchestration-identity/img/create-authorization-tab.png new file mode 100644 index 0000000000000000000000000000000000000000..5b6aca18781259e0a65e14a85493348889e581f5 GIT binary patch literal 46630 zcmeFaXH-+!_XdoJ%GeM=K}0}M6cmu&o6>s+sT!n&DxFY8MuE^odPhp=AicK{L_vB} zx}iyj&AeRg^Fv$sA9a^h!BlAXlC!8s!-A)&qG^qZ5f zyk9&&el-2+EoDzN*L!~)V`4}vp6cskZJ!FC@-_B(-v3O~2IGVT&364 z!hVKf%Js6lXa1US;Tm)J07hkqVKeRGUs;U%RP2{iCk=bID$BOT_a;l0;HM4dS%utP?j!7JW8ML6Ea{4&S zI3XR?U+a$1)V(K*S2dbMvn;b)kw|CKp>M$4^XvL9b4A}b&=d4t9ExI&r&?3kczFDe z`qAsE=kAi~zhIWWv|B@zv+(YnhyE2>wFH_ozUwsOj~^uvHa>Xr5YG)wh1)$wJv(x# zw@RBZ!tn(8v-0r4qjJR_!xiOIyf{21PsVQLM9s+OE4`1@JA2G@E&w+>uy~gTr_}z5 zR9$hi=s*s6=dSbU;3l5<(xZ*u^Eoj<Ql7_OfIP~B(KF$#@I1V0obp-q&1AlOE zj=p@3a{~PTJoqD$fcxXqrvfrl|+^P?* zqG78cE5oC2Y0miYktNK4(b4=d^c5UFM;`Ff+`#rBm7}?tg$<7*KlRruc))AuZ6<1} zub0@G@>6TbDp1|Cv^JpPV7$Y4hg#qy6%`eq^&>+bB@wajUk88Vr#7~=eayqeG*B%+1ZsbccnBg@plJ!C-^1uzl#rU|~b^?Iu6&BVu5qZw-HJ3%9hOg6{he zW@%^3PfZQ|(9i$At<%5}{_B@4Y`#Ahct9rT6DDTHJ4`?C4Zg|;z00EjcQi1&F9J6Q z;sL)Qz|O_S_x1XJeDdoTfBUA!uWvGQuyg$W)!#lk_*GRK1M7R1=HNGN1%7SK_b>nc z;rB1{F+q?1n<&1?`Rltt&;lpql^u&6mAmtg;9$lgD;+h=lv!A*f>FgP6S*Q%^?(j zMw!!$*b|&1xOn*IsDyrd;bB1%kvw3U@Q)9EyVU&rxluS#c<>*8|LSj73^BDAr2X~c z>OExcnYB*|Ef#44y&8wyQh^D#k;2)`0!hfX)|u2V{M%xFyCWVxo8J>0`8T#j&(HsD z!M|OzMom?#%*3C5<={j8xJKv=KK>G$jJoN~AMYHL09XtzSVr)F%YbC~|0ikG63{;$ zv}#P*gwwf>EQeu=3~O-YO+#Yt9j1@xjKxMj>Ia&0yd$cMRJYoH!Qixg%+v2mQ%vgoz}gmrihvYk`u<-8$R@PS3z zK`p7LZ*QSuv9q8}Ao{3*vOK?CuuGfZzDw{tC2TC#VOWxL#Kk7c1@pdwt(MjBL&WOa z%a+MolhI6TGd-Ezg_JYfDW|sY9wI!=b7`kBwswziWOQ6NT_SfJ^?=vxu1oJ?H{`v@ zttEJt>xsIaU$%&#K#T_!_NZy45D0809D7P>vC+!A7_&F!zBlDn@!&)*F^!sQ^Zn7hX7%ZV8eA{jOI7h1e zlA2ux^ZfU;)8oPNjQ-^xoo2JUz@vw{VS?k6uQ&`c>)7?Eri%ws3{9S+ftk>$>bugs z>+FHU=J&4VjP%Sa3;erb>8=*qisJ2vf|VD;9?7d0zV158cO%wTN!N5r-hEq{u2fmY zr9DA-x?5RZwxESWi>`D9=t8o(F5-H2)p~!rQCr+}QJ=0f^KNf`Go#ic>BX9THwp&K zpiNr}_f!mPc44Pfi(K|a(dF}UZ0Ov({o+xSR~%T(>yYSYY6 zl1xY=HomyO)#h%^4>KuixTuvS8JS0DFpQXrMQoSdIg>ltDa}+B((E#uUD6rowwg3p z-IP8u?7UdDy7Y!1H6=`wURH2-bvh|fK#G8WRbe61vSyb#(8SQ*!1`B(sNXRXK4 zuF*Qrl|^}*J|>LVm4#~Tf*E1byTrYg`wfed$zMEs%P;gTNgkrUcN6$Zl_}b%XQ<=@ zAHI1$am*SfP#S>Bt=^_T!N&3Nfv4^IC!>;#(t8B_Y_V?J)7(_~U2?oB_~_d;I~c^D z^2Cq3WI0p#HwIZ(5lP!(yJ-aFN@X`9bZI)lWw8 zDQWUq8$?OZV0y`=Z`u2_m77TP45Q$vRq()5u7uZkKL1J7x!gz@e^iyVl}rDukmxz; zeib~OC}M?T#ljm;#q!?DQc{0ZOimlHA21IWf289yol=%F_SRo|u^MZ^=)O=kB?nnD zB!{@B|!$kuFz%k7j;5jr%v+l^)+X zD?g_pj^kUan3_{ZM59h!#Afmcc0u4vf+r>|7MR*_+~Z&uO}2Y--9jl>8ztgNLkZ&v zh5C)+T`^w*6F;o9@-hWBm96)iuHeUVEv6*}Gc&C7-I*&O1eioMN7!AV7VAmp+{Ki7>R&MDsq%4U|up9~Qd zW$uZw9pZ%TJ{=;T&n3M&p@-u>Ga*Et%=K;=KkkVP@ow zroi+u*to1Toful=4y~B42tUnhLK+xs=oS98`VgaeNyQo%vcy=uyKL!ZlkYtKbCGCt z|7G(+MNRXf9wodX7*8p+=nL8z+fk1blPfTHzX!-C3V0H7e9QId?oJ~=O=O1%(9wI0 z1-1!j>2B5;wVirmW5RPh<1g-E(z3Yt#V$19$KkVFSUAO4`rzzl{ktr2N>{dUGJC~V z;9KHK#vJI2lgt@_O%Qp&;Kp?E{-Yq5{%gT9FWpmND)M+EutEidNwyY(;!vlBFLExm zY*g;mifg0qO8*KZ*sxwbxNHM*I=`vSe@z#*8-i~VlB&^1`;?A(J4u4jFVe2}zHiIU zB`ms9gBQgP?@m*sd#aL0A!C4~l9i!Rb8Bg`f$`3$MIxW5n$9Xl*02xc3CJ4Iqqv;0 z^Cc^<@D)T~r@D|8Q@0g%$wkA6+dK&bH0J1CIr=zLJQ-YkfTalO*`Cdfw;yrcpfwT| zyiiww7Ghr0nNYE9SnhQZ8%hdn>f5HnWWWCFB;uMX^98-U8g`3@GJ(TA^Xl9OB=M23 zJpD%d(vJ}qx1SO&vrfg>$SLUJ1;gqkWBM}Hb9Z)UGIQm^_1q9=J4NnX7aOl9;|e{J z_{T|X%@yWY_2f4Mf_#B@wrYk_0!bfY`b~2~i=(kDuzGJ58Ip~<6O`jluD~j`#P&~M zw>K8!bC-u4Mkd-c;%SxeY@(zI=e!9euE=%_M`$wjuK9GRhti$aXOqR#f{Dmxg%THE zktI|?Dhd;hr_1E^$|wJofN|WiPtn?9K6LBY@ntrzRUR#($K{()ep*yg>L@|kWyJuT z1AMV+!y+#tqUn}W*2sBb&oi8Zcg(BSdQ%b<@JMytwk9sFgj3!`9UU+)8N#rcPc$MI zLzR;*V8>Q~*xNk(uZL^1$Tt_);+`5GRnDSh%}XC@YW~u+D4LMzA{&R9ZP-J{V0O)S ztM~V?Q$@BGmCJ8c@T8F})TIT$rcLeU9q;_>6jMy@7Pwt1*xgdDY@K+;jj(<-ycax4 zuJai&GKVBr2}H+u*lUUE0v#W?Zwxt1JzK!8PO}QD>W9esRev%oXrbj&tENFMML92& zb&=?~1chl?lws}>xdbZmF`Lk~`claw%7G)&yfW%DD~hb`+|Vi5A#2#E*;~s+n8$$N z^>tyj47sUAxBNq*Mi^NcC3Oq%Ra-0#nv$V?errxh8~VT^du)tNt0ZJjdFBhdl(Mpw zBVm84`emHV3{}%ix80mhjc0VVTnq;x2# z@ZP#%=fhKnc-BAa-+1lwK#V-l3!8mEcPdqI7p_Z$!hGHbULvd*+?LpMRRl>_omhF~ z=yA3(LmAoLD7rGFjIu1d>RBFb>-X2WU#rXowoS#m3z&m&kFGZlBput+sdTuUp-CdJ znb%EhjpR1tI)pE7$}_(-_z=N7QNc6s?1$P~4s?$J0&$mZuNJ33T+=dtU3YxGdKg4V zQF}{Xg2`9xKVF3b*p@INu^@Wv3<&Iu*LRBN{6@kh!gZad@jk&uWLR55V78$mhXgk! zItj|+;AuhZ8{VtqFtj=)xX;bM)~$@l$j6Tv1aH%!=zT{U%ckO@#oxP7>dJ&(OnOMI zu{1EU#}R0Y04^R=jgK!<76cn_NBc6xS%9d}_U$F3WGJi*Jny5(&rE+q%(9*s9&J$$ zpBX5zY$cj)5m~yi-srgxVjB>Cqz@;ana!2umeLGKtg284YR2@Z{UDzRZIYpyj zDkC$8z9+A8uGBtRgXRY6vX)t1LnpQGZ6!CU%xX%fFR$QGz|73wALqOfIY43hncRJ6 z8ByQDx@bZ5O75>+B@EAo#lIa&0cJ2>h+tm z(wW)Cnn)oCt-S&E#Viu_fk#N$cPq{@=j~X2=8OR}9X_-Ye@El?OuR!|9J72ldN{0&ajmKwu zHsno6)8yMSqF*oX=U29g_Eq+~gQQY&#^odA^C_|db_hhu6ZuJu%+^L9Uq39_Pyk^|AzWTBMo_CS^wSP~csT2rs`S-92 z?k;TCaH({HhTZpf*-X0A_>_{YHFJu!nZ&#+cQDO}ZfQK}C~1&Uw+TPT=MY&kdMU}n zadZf{`w%FVA*NC4SLy}Pv~rdWk)3gRj_7VuD`MFHPgCNtut( zyd@SdbGyO##eKs_16XR|v<4nUKaq>KkeaFIeZ?sle;kKu4v}0ykmPdL6*$P_|KG`@{B|v?{oF@3i^0;Uqlyo|ovegCylP;Hhy~C8 zT{=`k3A%Vr_V)KE+%`Ykg7_j;z;!zrA9FkZ9W^|Ve_g^AyFNcBU6fgAno~ym6=-r; z9G-7tBKme81zudssx>v9z0I+%2xfijl++mOra}-orUHLlHgI_vz*Q+ka$HxdKw1nB zyKne@1iLmH9>BX$x;pAfFzFmBNgH{sg}IR&4kAK%2$(48yMOFp#bJi?%Aenk#TPOUQc0IDue?w#90Rw3 z^S-}j6fDc}9t+T%ikvdz%Tia^j1|Z@%rvUic>tiMjOTzX1bKNf$jPWiq_YcJd8QLQ z&q_fFw$;ZQ2ZcvvXYynUBnz^a&0Y&ffxEMs2U75Np5>i;u?PH6YMTJ|8>j|AF~+>c zH+~h1)fI)V!0AuHhd`{AV%sTsVwQVHB06yVDN;L6VJ4hDd6<19!Q z&cVm`+|DV{Z|+ymm5jL2wfeLTSX40RVFA>4EB4|<{m~E!#kUvKwSyAnqAjZtXEj3Q zxk*TFu5c3K&+AR5$-c$fT;#V&b4SuaXA$9|K{?9L-6 z$X~#^6@sWoAY^S(-J)zF4Cat2IHqgTa6w%L?7d|%9pPDkw5G=Y3CAe3xGY(Qo@@jyW)^t{Kb%a)bQ@mP>LqMDg%_~c)m zSI(?wAJg{vrd??i9+L~wiS|~x=NoCG&GL6}r3O7kkj^hlIq8%JNr*StArRIHgn}!s z@1bCMZ@r}ELTU=Yi`f~<#$Qf@MCwCVErngTB7A3adCPI!x3-<7`F3!a2Fyn(uGq~7 z-k;d|&m(*8OE-=@o~YB>jB1F^wx4Uf3q~>uKp&VlArU9`Aru(oLXXeJ)Zcr7kFK{5 zf)TfaoF@_$Yu{gpX}XmP;S7}9ZSH%)pi)r1Lo~ZxuW}0laDy0H*t%rs#CA_p@Rb(k zZnA*CCPy^8)jm1GeTTR%?q-r>7spdJt8D59&xletzQIq%N&Zs8G2l4UWY_F%!)MY{ zFfmnF}^@tr^!eojH~dVem#$SPzfLDNZR<3FAjH7NaP6WVD zs^c5ZnRCj`4Qv)cFcn3-u< zcUw#_#fe;MsFIY4?yYg(cWEOsXz;zooL|c4y4oRL_Tgh+g~KA|-u$+%8&gjX?xTY_ z=Zsu}@=-ph20#%+WYa)Ghburx3N(dU6lVfh#AX^t*pbf>YV$rf;@;T|HV&?hgrk5} zCbn#UyR#7+L|tnGVB~R5d;NMjzCt=B<|-*O@ZgPG59M3}dCUOx3ioI4^_Kmi<99tu znaXB!DrnR0%T$n=E{l)>iwX816I0IT%TTOAan%LnbCVq`p-1BWIJvzTPJ?XJ8D1-Xg<^KT4Iw7PAKVBkG zLd$+~EMP}*YPl>obm<53hrRW`9G?0ZTiq1HmO zE{DjssfApLx8g$?_?n6%c^X5^L~(BRPWtdjem8+@`1S8bNp)-hND@kaVWctOidIyU zT}C>pi7C21Ep`)2A^b`)No*oq5m|#x`OxCx6U4W>z1BR{_&K5&zy@-rlONXSkONM#o!8X$6kSK?pzQpn<5z$2O_DwVZZJFi)0-Iv`R;yB7 z&(&^wXwgmG&BX12&AY2!t@Lx0g4p9;wm(}%)bw1bz5Xs zg6EE;^!iBzP{%vXq}%@W$Bl8jlViGc)#9&jc7nVz2o&8awc9j;mjK>PFH0CMzeI4r zS++0X@;^UwnL~iM|NJ$$e?M>|FU7}K=RTz~CwHdktH|QLKtGfcSI$Z$BDfE5ml7q# zaBXYJy=qV~obqCC(U}72ek)BNC`xHHO`ZB4f4Jf{ka_5Aaq^;U{7Dr5k*5i%pCosl z%PZTIi%ra~{EK-)QvH|%nkTQ_%0@UG!&5kk1qfEe)UY1FbfftBhxg2=v^zPe%vAP)l**8t|9sZB}=lq38v5cy3gt4>Q;3^HI0kfkLzfQEapS3 zWLZA_(ujl5(GCvo8Ol)~c0`mkh&<$ND&}bpUh-F5A&N&!Bujs=s|hDE1`& zQa8NOyf8}*R-|9{W42oF$EW>{s*dHO;+AYAKsBz6SIB0o){OJEz z%V;ksh~jwAyd0|p5!~A)_is%Jn}$hMAd!)7nF||Lty@+)5K!WehT*= zFWk61u!IH`0<13s!-A&q;*}!{5e&JN~Pr#*c=xU zlY@);xq|FRi&P+b+O|4)MgvSt3r@$Y(@aO)TZmO*LLAB=gRP?Su;?ip^OauN0V;UsaTMLyqBBebzFuZF@Lg9i_*`}`Eb7gZiq}9|AuxDLrtmmd{H0jR&FH= z|K_Nttk@r-k$|)zN5*aasC+8USqgzqzSk-yvnNP0409~9c|09ab`jTb>1fm|yc8t0f?8QK#<6rdwMG@&| z&(?n#D=pCgb?YubT!__m-(A}wl8pv+cnC&*NgMg-Wg$rMQUTs}y@X3w1_6ru5H})1 ze82^$)buMa3VOImBmhuVkj`<`^3xA^tLs-ELjgXob<+XIgRfE`qzb$OS(?L$D`!nC z8I2>_zXzkp#T=?tNq5;YeSNl%sfBOl!&hR+RIGz;zspLCbVFn17VmtaGJJsKn>su| z<1*uN^uG5MY6ZoBkK^MXOXl*MCl&K$&vw5T^V^99S*mpQC9cO0G=Wk`4?u|;JgP8I zaF44Bge8b>nRo$LrI^cIWesUj)D7F*5Vn36r=gnEzy{<#Q&b9mtvil%McJ*t*Y$+f@Kscw7{OLPku;*OHf0sGMimb`%@%?`DQkUtf+wt> zt^&MTY8lk<=85Sj@+-GzGU+aIGd4xov~v5t`CcaUP&>&+GM>IMD%XCyu>G!V?`Wi1 z{`)BJ&=az-rb5TEYscG#f)tZl$X%LQhZ!KTZ`Af z=|sX9Zi7VJO}c97Y!dGd0p@-#F`DobNVI53PPsY)>}s?OVc&K?Pw>Ho7WC4mi5S&&(pn#t5)`)Q&t@UWpHCg@AfndZ|yJ9(<2j#wR zHP5lhk6Z4Zgh@;b9j{KltrB5Rg*;6l+DFLmU_pT`Kxlt&m$w_J7C*;SZaE>JXl9}Z zk?DAHuv|av@r@>LPPOkU^hBuWWc`=e&7dFt_-AZ1Pned$?%3ajgZRfsKd<>Ol==N+ z{ohD~pSPmUW^ORIz*mLhN4Wm`uY41}P^3`m3CE_U_0aF1wVUHYOvDnMfoFd=*5Gr7 zKTcoaDNMO%-ai6A64ybpVchjB_D4)bE2YJk~+>_Mbq0N$@{`{7~ZWs`8&e z{u9Xms|{H-vwYj+Lg}(3Ji+)QoBTJsWq^D1#M#>eCi{JIr19+5`f4+0zg~!`-pe4x9tyk(Wi=PkxYW*{5tnANz z8G*kq-S{-%3;ef??>_QBY5der@Zvvd{3ngW?S@BO?57W)*2xV@pzw6}{k^h}fOwe< zac8pu*cXe4w76wDSZXy55IsqVIozKjzmf{?;4F(wS zM)Fq-SSSf!2D~#3aIBV=UBJifS_H`E>S~uflyCO%)d5f~2I}Zw14L$s2gd<#169EY zRJ_~vDk!<5pk9TBb>S0Ny2r`CV|YJhC}e)hcAD6Hx&0wv5y<9NVx-iz!JWH4dr`&} zgQ~x6?U577CBsgc$qpbbMmdhzf|`x2Q5?c>8#IMs@*qqUv^`LpgU$drlyK)(t!vV? zb%;~O4ue#=(>~-9fhG0O<2Ppzg)R4uVne@D?pz5UZ@;13d%*!17i_j)+95h!rC^R7 z0LP|g7Xbu24ak%4u+94jz!&*SQ`DZ?1gI9La>y7=oluI40Km?D9i+XBWiJ1Q?<(9}DfmLnQIW?HbVM z(Fxj_Vp{=1$mX`Q>0&(oE@+Da#kB}QnSkzif7k^y7AXy0uHTg;H1-*724sr3Mc;M6 z?1OrgNbYw*@GLs+5x`ueNpx%#;qF>BpzOsu515s7GwXm{UdUdta=`g|&|m!0i6bxL ze_lAIY%=N=Q4Byk5m7Io4n2s5GY$2X5Qw7dB=8;v0LX-#ZMrX4kBryetaSxq#c4y3eIxp^Z;74JD(ScXp|5{`=Olm{dVmsWr*#e@Mu3UOax zkQgYx3S#ykK*Ar;CiL{*y|_9ZqAVv#>9+Y$Ky8Qh@o4Q%@8W6J4=-l<$NX4PUzyUN z6QqG|3k$X)ykrFMAXfpmVVu)&1H87aJ4TYsIqXP7Y1*pDj{I#$dgkNIn^D zxmLeN(U=x4%Q?h0atmsKN(sM<77gZFuNc{7j0Nz^G~g3SmJC`;=jeq{y6^iEZ?I6h z?^q4{Db|9T8gJxfZ%|T+r(c23{tUC0CC~6 zFDoQjj#O{?f22!|VVNoeyr-3cg1nqIz=;W)Y70zP)eMGc4Xa)8du$NNX&RUa8Hla| zwP|8pR!y^u)Zp}GfVj$E!++VbjPZ3XE*$jsv=BUO%4G&BJPB7o$B>2+$1Cmu!i&;L zC4K-_LSPl0fp7XWtQrdlLVVe!Xk>~PYj&A#`ney-wEZcO+UpC_Xd}=PB`M8Nq@tTk zdot$Z$Qa=AIEQayYg&0`$FZL8Y=CIS(~ZX5uIjFPW05yg+39q7e0Tu=gDakb#s#Kg zwK!b0B2BaWRB}+So*nJ>mEytNpsl?RIMDEx>zaHwdeL;0&$`h*XAjmn*lF6QO_y$i zZTrgZV!rSm!u9UGX!kyGdpXP`>%DRutiRAP(-s(z)+6B&Oac^PSpd=FmN%1UZXiy% z4b?@R07NS_K!jDQj(991eO@>bqjLK-`9y=Q@+PxJd!A2Z8`ys zIo^{`vBXhAIXSWNV*r&h^V8I-zFSRe-{~lYa#Xra-W|1suYH_f;D?E{({=*=+eees zyrc2m-`l8}Qfw3iU5P8Z5;C92m>h|}))ew`+0%EbueAm`C#9pJGD3>LUvwjUg5Cus zE)bH>NFYgcU^73cK|jmBX_OEnyWTjK)Ribn4c*e^IL3y$=j+;VFKlv?I)Nz3Nf&S% z__FWI%wF_}kLZ5{yikf4Ghv!fK6S%D8mL&CDvkRn?Iqd$m<7P8u3xCIjFa+?gg_lO zQ{pIHoDEM2Rg+?Fx`}%3YhN5f{X!Klg2%cltf?gan>mkApwcbAxo{cQ)T=?1>iFpq z%so*5Pr0m2lCHY9Mp-E&vq!|@FmUZLXGJ%^YWTdXWH%e8!Bx&+^!j?E#20qJqyFo7 zk-og22oi2KRxR}pN{Vxb9^7GW8%nXnmk()JN3YH|P$C1f1dou2Vd%zZd$BGmm)oNP~)* z)vlugQJ-%iDEUq968`B^qCHk8WkVo*{49Bd`1yIj6r2W~plxg3rf=nCXw(JxwL&fv zyf_O0ZoX$)S&hnkI41LJiKo9K&0okpNbgqyme1s9iyZGfTSv`4Gue#=Etst(p5*h> zmtNi?++ba{eh&pWeP{d>nL+vUfxyLC{I_K8iuQAX*yp8&(s0nVD+iiT9>t+J#7G(? zCQHM;r!B_Fz!5h^PCpo{zP@mSz6%uBA{l|nC->%AZNI0yLkvX=EljN@Q!X*npY^WNHtr+(;}$Y!)VI*$h&{}r)h_-xvFXtZjc77vS#z5W(FX2=jcOim ziMW6|+ay)kB8$T`qE9W-}NaWtg_0wJGYow(z5GfBZBvVVo8K{ z6Jc~o0O5bca|wCJ%CFZd%a6NmuSzm&-k|s^B-Njz|7I?wN_CsVVLAB|AtU@k zbH@DEQdn##;Vce&xF%Ug*I?QDq5KfMe(DE!@>+#4heNJuxFC(E|AMFb(@6f~MWHBw z6BsmGuOEgt;H!85RQ7`HQ~HBW=T~gq4~BhoU1XR#96-(x0zY$-NBF`4u;Mq^!JH7l z7QSIN2ja8eu27`{jF@Aw2`7L3@`2ld>d>lL^Lrv*2hgWQ#5+g&{o4t$5Fy2~Yb*3d z1!p>Op6oC5`|Gx;cnXQfBZ$rKJWYLZXs0>;ximr`PqOKoJqORpuVoMe`1#qNhfIP1 z(iidvV^6vz#M5bid$7MhPXfSi=&rdOE=&^y}b!QqLY7oKMg;W`!~6HkbwC{JzS@+f(?_{JX~7c-e8^nwjm~m zKkP{$^1FZigAo36Aqir5WYo1QP?80#HBW<)5egdB&>*j#oO8S4)=Z|%Vapr!BKorR zMkm8ueH*ZtW1ZILBA*jb4j23F^J76mBL(G=fPC%R3dMfOfIA|XUA;X6<+SFExhbci zj&T9oZbk7TTdB--h-31VUjju^(>ty76)FioXyDPm2rn2Y35JGN5Y6QdGJ`CK&1v-u z8{j#rQJ8G3gS8~sugznN# zd1Rbk+5s7fBva+mUF3-i%Q*TV9WWzW2hl+^O|@uC?Go=?58~<6}VhPmdZmmwkMLrT)ujD0YTYOj(S>BYkMN1Yu>_eDOf1 z)U9lllN1d_iPf1odYR4eCIxq$@|mZ(>1UJNJU)6NN$ItcN6I2OW{>ac9>- z^mKdIKd@#9>M@`=Vhf%C1xPkI@518T_qJ?*FmW12_ArWf6(<4BGgvHuJQ9#>;*{dh z(#$M3ic*1g$`!s?u!-HbWXB27hhi1-*PyQ=12gE8SkT*Ou*#c2uO158i>e zDxRa?IEg&V+l!L9N-{_Qbd#(CG=n61YXurb6Ysiyf3F%eJfwW>U2eSSk?@{2I?L9A z?~ad9Gt_KxR&ZxYiF;YW0LrnK#pXap8a|T0J8$W(b&{-MnN-pi^khzW-2}~`+Kj9e z)%Ehp_~Z?1=&y~8pw?{vxW_;W5G7IcN=4Zz|N=Wmo|ImM?^l$b)7T(>=gimv@@WYwSEPeY=DHt)ntK%E*@`OwVnL z7U8z+t2b_km;_vq9Wisf`^5ljB32G}0km^ElxQ@d`K+kiW)>X;&6BZmpodfG63CdH z-4vAj71vYnKh)>kH2P!^E(`1dLV!kWH4ESnDV%1UpB@GCvB1Hh`C!>2_V@vC-!#AyrjQc7$JBFr~%;m+4plIxsmNvV%K_`gK+2V54K7G!k6ks%?|1Oc>;crX+++x1Y%DHy{&rLXP0EMw3<@yY;^>>g?Q3i zxyeMHx9kWLtn?|H@lF4TWC1WzE85gIe)-%@F{%dnpv1ulB0rRZ0Rg7c(WmF- z@E9S|b~*tqtUQF;6(CnB9qbL&rG|5s(#R5feUlPs<_!0;Z)F~b93Qb3NUgfaZ9XVQ z$>nhExyH|@>mjh!xh{=gJ++YOu_jNxpwu|=1!CH~a9N~KQ@xT*g(jYMQ`;3j z$0fWCYNA`I42`g_BqY8Qi2j#tWq*$ko(S2U0@ST30RG9bwy-Jd+Lp#Jh;`L(a}!ee zc->}RlSClBu3wQPv@Kif)ruxw2CS>e2QtC2BL&OAkO~0b<^<)jCf1W+UQsZFpA`Z_ zJ_!a6w1E*lJ>xMx=C*3PwDxBjzs5CS*+?q+7|M~9-c$8p{zo|jDv<$Y>^qou{GobP z%ra<3C8;)W?J@S3f z4UAq?491nfmM6(gmeJVrYnWoIK!wZee}2$sRC;HZaeo?rMBAn%6tbnwzSh(@Hhnq{ zcFFH(5x!1u-^G^7I{`zCVY88y%Re~ouDepG2hS0GRm3k5&R9!?g)M)E#tO;nIHBD7EW0v@4PQ{W7|b7v!Fl-p#bNf@9TbMXTq;?88>ko}dae0jL<37*A zZz&sf=jO|NFE$Fz;#mL+=_+V0DtIq1Q_vgLovT;Fr*uOX&j_>S}#!JPZXz zC!Arsb-gGsbbzkGcvNEft`wdxlDIA{F~@3g8Ni~+rA$aCiGy0^`p4>~<%_F=uebm? zl(#!ygLKnNCQq&n>ZXQ(ZMiBlzq3&Q=2r%Me4e7go3|zoEd)_!Q zMkgH5+YrY}E29Htqg5faQh##3X~ekJK@{MeaiCC-Oh<2AQ}h3r z9VY@pOtCpTbK1jlAQMdxaHA^ZCk_j^J;aDX@=~wcXL#Uweub&1W1zpf9IF!dFQN3; zRKWQEWEo$$Eylb2KUy6AF!wQ z_}%_*MB`+yHV?HMw$e*+e^)~fs3>uku9S27T>OWFs!8&P?P{dBV)nO^Iug0{BgL>4 zsjZR}UmZV~&SvP;5}Wr7-<$d7Lw@CJzg&G9NW0Q;@(xdk((Hkrm@HmhJDkC!0+KtG zCm(;T=GV=CNLQr-Bs@hMFSZX)>*+z>MK5G_ct(_=1GKT#nL1uBli z)b$8%4i&OZ@?($Hhx|06*x0?isK z&IIX{hiAig!PDZ_A9O80loa$;_k)v_QRUTrI4Mj4%0rL9{zp1I4+Qp~di>n$|J38B zD4-V#|Eb4MM+UvTNe|^codte`2Dhc z2QF@hn!#2W|69mUllz}U4l2w4u|)QBtFTYPljtv>*kSzRRSC{>+E@uDDa%(9iXuWH zPtOEd;7s3qg^zdpl{YT6sK~hdInkyQxNgYJ4wYnYeEdHdJMW&kdTd>AQG3$R#>TXi zB>%mQTTK-!FBnb0+BSFg(J=qiKSPtR?|4juLuFK6#YT2$=ju6QJ#g+^Nwf}+F1oUx z;I!E~!`c4Fsj3F23d>l0`0++*fdFKBz0>#yi2pYe^wmBmxPnX8b<7S%d%p~VObKx8 zUGpg&cMcCyu;7yUijPwNy#M!iA}o$=%a<^8LHGDDj(gOrH}yOzYX(OT$K_wY^h=-- zTX@^aC!j&n`e4??P%qSWLZjEE9~C#i!S7_3Dw`x87~mo+ozXYD>?OE!)q3k;@&d*F zZp@gMl`d-&^NPOJ*1qWSRzxxD_AWmmQ?-D(L263(hWnKu;h5swjGWVxdSQ4PgFMpu?z^ zcwoSJ1@s^`0^oC`{8pdMz-mZ2b|@~cKa1gS{{5?EV=WQN75JkP;K};XSOy4|wgLcp zJxR@G1DMrvLg3tIms$jbJ9p*fYs)*4%XSI#++2M~QQ=9uwlxWjy}__EK;;1|Faz!_ zXsF|1XsEai{x=&E{|Vx6u`hyNo{Ip+_l5>6cMOe{@Hghu=Ts2i`s+!<*>@owPzlQ%W?vB01N)R0=Gx3 zn;Eo5rrI@~=Zn-`CT{8ZfcZRGcFqH#eR}Tv(74r)fMA6Nm_{HNu2{_83`QywpCErM zRJI6a;ofw%9%rfpkoO3S9%DR!0DE_OngCacWMpTObIeo^t9i+#Nzc>>Dm~Lsj!v-* z^r_BdnQxh{^VOK?jlCAVbejwG1;YT*i*8^EC}0JjjC!LRxZ#+QAol*Ho6Sy_y||!R z3?wyMEtY5iY6U>-1*Bf1(Zo<*>&o6|0(VlVZ_MTMDZQJsPHR2yhe#;Eq>ucnOKI3T z0=IKu^s(s#H>ju3xYxy3>ExG4^@jG1Igem<5pm#&?78u}z|isekATuN7U;gCZ~Dp1 zxthi9Q81Q8f(vA$ovQ$%X_7T)(pR7M=N$G1^Ssmf4A)7ax!ajK6U;oUCM_Rdvw(@% z4WKAO3`Y8nXqF6HHD1a4{QPopwI!e1`sUV*dJUN#VBkqNRvJc452ZWIvAY5Z8CRa~Q}9l+$0OVPY=pJ`)c_v3h!o2yoR zW6k}*3mch@bTt``6^m!?+haWm#rI*DO#}5|isdm=t>OJKA8$`L%|Kt@+`6+gn#ENL zF60=}=6TgX9puE=qFuS;mcKVsyk=mXXtaQx3qOUc1t#xu9|zW+-%a&&WN{PcOkUmR zh8MblGQ$J+uiRfKPR!+858DWi=uP6q}yQfk( z2=bH--_}YQAwHXVfj>!&v1uGp(`AiFOqxgRO~059<)o>$cH$4Cb14xhrXXM+RAU*r z&M9uDLGGTZui4+PM9-5|(LXX|;NZ!N*yjZ*-b7)D*mnlnnwaSzk$tZ4(fQ1%*!TM2J@-##F`(J#uXZt=CP zrYQ{*W$st24BY;gL$&%$DEGJ{O9V7sI^U(}Og=a^LVfe8SVEq8erzCt4tap!6^c4#r|O^v}QjkDFG(Fd=dU8MIU0*D^{ z3L~g%DECBdv1r)#-Zv60zV5Zv6hgpK;37aZ1SSNb==<#NiJLc%HUfLDahw}-MDO@( zmdzJ*lhSN(KRIkD8J~olY>dEL*B)d4)Anmzzy3ZUpT270c@TBFB*3jsZG4 zQyIf1TaT5Juu6q-Pm*CxD+`Gpgrg0NJGS!2w zsOZx?diRnySJ^w8J&&T&&-I!+Dc(19?WLvXFOhGzMa)PL<_5&_P06g2mM<@O?^i1Y z(g^giOf_@1-NGd`?Lq4arZ>o4?uLz9Y6iG|IVP$A_t)gpFx&5(EZW>An4NERUKw=` zpUGi0$=l#4+SClP?Br!=T+9mK^D^C6!YeG!4xQS>TwdF(p-!;rVJ<4&e4%+MYpeN9 zgNw|KK6Jrs5uSTSfm8CtEv4f{0ow@v9J&ZXNY*m|XvDA)hQXyG9?>Bz?E0;%iRhgTbO4 z%kKN?JB2l}O;mEnrC2OmuLm88bJ2+N@ZVXp7ie#$xX684v2`sNyYf)8^=Qz&x$!qG z+QqV;;>cmQDF3nqvt$kKP_H~H{eRWdSfUMB|w#F)VxiVy<1uEgykgus&z zC&IVxSOHRc0N;j;&J|wg&vRh7#l*ed+u_2`T}bbzfPXQA0jdLP0NS%Yn9*joTjb)9 zT>zF6Nx(S;Dt!4yssd>r>Dx* z=5MGurHbq3x}-%_x%8s~%&eV{|A`4-+Iqq1{H{sVd2HUhgGJaTv-da`XXv-#4AJh!I(i^y0 zk0F$Hzt%KbKe69;{)zGXj^z=9;}_}z+xlQ*Fs|1nZ^Z{ySN%R!Y?e;GFw!GGZ`He3 z#DaqROxplG}er-wgD>*>wd9z~Z* z^q)*Uu;{>&7>C}<_w)@8h6~z!B87wh7tsPn~D9cFTx9Ev{F zs^~vXP1-SEbl<85-sZTmz)ECW$jE;2+N1-&bJoP`KfynBqB>iZ&pZNjO>J0u#U?&} zaaam5@_rlqlMKO_iV*(Id+Hk>;J@2?s%En;g)U&R?xQQKouiaK{p2jqC{S(6b9o%bFHWYs$HTY5E+EuKbo63iSadY+;kA}5af^(h9 z&dWAb^9X7bab^xz3VI&WHAqfMeBT%?X}+l}>8+=~@jk9o7OL6o4Q8W21q{+>4bzRE z-&Z`NUp8)C{5GOw%<@^+Pn+tth<858%a+M9Y;|?OglotD<}ans9E36blr(dOD7vs+ zM%`p_6Yg<&ZY62bp(Um7w}}Q3{cER(t!*EtQfy
    <67Cu*f#EmOKrinJ!vObjO6 zJA_xsO|aK@I_OOIY$N0zymATKGWfjSSj4DZR%U}4^>(;xY^|aN>x1y;{cQV4*3KQH z6Ur;;N4)2adp&XEgox=+g}gn}1+WJrJ8$Sactfe7MHAb6aZhTqQwSc+j+pS^=~*jf zT1yo{iTP$rM`E&!$hRt+T*dS?F3HTjVg(cDomq`S_wv3o6}wp>?V4P8i(C^{bOqm+ zn!A_kYZ1ktFuWMpL1n52Q~2ztHJ|ffn6UMjLq}l~J>QfD{C+8*o{(|(sbk3@6g+Dr zOO#0rH+~QGR{uWJQ@ecUt4dW84C|gfI~kEE+jv%EaiH*|bd7#-FD&+PDOeao^mk#8 z`6F49dfYjs6JJ8tu|s<6aaOK|_p(AB;}f?_M$%VFixo|t&b#?cCUK}d`0#U60p0x>;k_b_E;v{Cu*) z2KFiQx+rcZVINMN>h50d!+GxM=P#1715BB{d&O!e7T&!n-0OGVG8%k-l3>+fm^$2CTDq;t$^88zoz zI}EbcoNEnnbeimZP!ow|0;<+rvte4G1S1|f5HT7-8ZfpU0^PDW_9fH z6U?nm3HJ7xcXU|nlBtI@8XeX#ogdhdz0eF:zM95!Z+BeKTEyM3Y3QHfO;9UEfzIxwpEi8)^p;WM>=7w%5Km za-QVu{I(KGN)P=M9+8_Xf?>E9mDcOq?#u6H5y#(!t9|mMFAjVSNQ;#~;!Lt9JG* zPHC$YbN@c8RmSz~?5kj2Cpg|G39zy+&Ko_&`H-J7zk$-+O4 z`OfL*F6OPhyO4cpu0=?)_nupktfPie@^qf+U=hE;-HAks^PW*AY`&iEi_^VWd7L%% z{9x_b-cupX5(&>LmndSMenX*pQ&QC{G_H1LJ8O1OF>2(ZeS=l!2sGB@Ys$BV2ZxMt zJ0u8$CUtLz&W2b6QH@Z2&b}dTzi;HAAFg{Wb@PA5p3C4^U!Y<-?L!sLJr;-q6tPnK z8@W*d6lmr}TkpIuq%dUwJ0P9pd;Ea3v%G2zkC?R8+1eoc*N4}H+S7Z|ld_vsrULrr zl^l8aeaoxY%tauBV|>I!j)_>{`~k<@2V)P6XkJy)=UL@vKH$?LqEdGItf6};_|{kX z+9Rc4b1oD>1y9mv>)UfFbR&Q|5L!cAnJiZU{1W}eEV)*X>b;2}Y?~#H-XvG1Nhe==0_%zBYqKnzyw^)xci@rd!~=Cyl+i!QxA$g~xCP_}lB z&Uq*wq^m3r^*cayNPH28LZnjd7bJNk)BAx7$PKWPST&D&b4P_`XLz0+mdQtYwb4b5 zl!^tezUq$;F-h;=TPBHXu$qUhjJI{~-cF(JV^U8^Uo_qoFMctzquJ3Wm=xvQ`zx8x z=9%Dy!7eVR+8x>SH&bVx^t}vS=|91Gsb4z#(%97?i9yq#=ygg%LcW*CArp=B{fiI7 zo@cn#7_o2>UnCe^IYlmZUy6U_uUNiw>P*`EVi(QI-?ajB^cpo6q_e{}^bMAaX9;T7 zR!#U|^#|x5J4o-BqTHI}OjX~IsW<9KR_WC`3kV_@m%EP( z9CLa`=$+iphQ0Zo=2U5l4A-51cW`enNA-OzLTf9}PU_*=7PdjV>hvsS?XrFXsiw02 zAg+5ZFt9nC>T?F|cex_e4^=yN+rNL#V$*x&H>48e^F1*nOevZKvtZFtJy)^1IpS`x2$XQb)RF2!XXb@v#cWpIan{G7N1i%{j_bA2e};BzyqWNDY~_Vkx#6NZC(0+e z9oP)pbXDb6nac*X62WYaRj>YP|i8}EsdP3OR#ZrRRfr7C{ZfOWL-V3Cokw`B3!`I>2C#dtf<+O5G@1I*8F zq9?lsm43c7J~7+Kx5GLeBV0_t#uPo}NH1x?B&xT%I%05oj@piDgP0%jNu>O3y<4lF z$+UFPq@=Z5ua)N?V%2IosL?vzo?0L{F)+Eywjsu%$hil5u!OgMJfe0K-!WG(TdQkr zWgF31_aw1s&XYj5H^8;0Ks)ICF7PsexqPDJ&}ij@Wb)mwr!2spk5iPduX~q*bxCG& zpq}0lq)ZZ9e;1Uu)`>bHr|^nm)@~<#Kefc@es}<0>fEvd_^#*8UB}7XFOR`rAOFH z7@yol+S*n%zQfwqV7kygw;e`~0Y z^|W8Tx)7^Y?>739FqG3FCOa!S{b-oJ5Jenyu;nhWmL;?V!kONVOP>7}jFhvb59G(K zJ}wF#>w7YOflaP^vRNwi-p36XpNLz~UUl4=Z@Qf4+V zk%^d_l_fBmx7=R`6W4p69$H|&nzQ~jUfgdFQ`?%hrq1SXoF9LjC~A8^aPsR`HHNXb z-Vp{c$LcL!tYyr%`UP%PpzzW?h772hHkb@aOiww}{y8o9<8Kr+#L+lBhT(@;Z6@F?zwVRC6)MCp`9Zi^t}+pghISsguBx{( z1`+oTf?s_&*kHOjh<@ifvnTIsT)#w)k;VQv(zDJiB8E0wg@^vg)}2nq)i&&X3lWoB zm3KJ4V{dhv?FFh~0K)GL$~&O#dJ1NF1)+KZjD9Y!(wy~^C%nw{w@ai_kjoD{Bkkoe7rsWq?;~ zLw=N&V{Sz}D0Scoh~6`S4M}`aLmCm*&GM}Un&$;D74-vZt{m!M%FFyVlZ8>}DG2rj zOxYfR9VK5aSlcx|L<0b%AI=1y>q;<}{0V{n?dD(0C6)`5*IM2Y`$~iD=M8~GE^hTc z<0%ARReQYxc5TOH8uCF0@60XI!mWTT@#eKV8QkPmD0W-|Egct{wsb?q>ly_Kmv%td zF6V{dC%h-~Z^gifR|fkwvIhzr$j45gps72DW1h@`y4nxy^$SVrLW~yG3hx+LRTkc6 zb+JWGh_62`nYFcUo8^;Dpz-!>wxq&DN(pifwynUM-&EuN z4;*LiABf$;a5*SC|6q1wg+{9G;0V0}c(o1poFObV6I3AOXt;$WASP_FFbsR*=t--H z0KtfU=QOxuq6~%^U?1}!e*@%>NSSM7vDOt(yQke4jrGo=Y9w$oi~1NTUrk8;|6?0+`ISlmfb+n68`lSEJM1s!Uc0l2QD{os|(4UbXC@TWnF_K-M&x zk+F*v&s-=3l+Zd`b?oZzzpgVaLM(ohjr(w1ZAb;e@1ycHsr|1VN%5TiYO@GlaF zhEV1YA^!*I*jk9M*n%jR+KLl zX;8@XBhDp4glX+9J)dlv?FF@%uj2bi6(L3TEeQ{f_*TFg;(!DtF=zOAj+rn;CcWy# zGTN&Z@3*efQr`8<$YHkH1td_)tW~rsjjI@4L%VX+;&-Fn2B^>H{I8p7+)K@E*@rTM z(Idu3plBCauwo})zcfCCFea|as@ZMSp=MBt@G(hpZLF5b64a=zvImI;vGNQoAF>;K z&@o`;Z>Y9L$;35aElc56uzZqv40$$)gZ0MVmYyFO->Tp$65sn%b*sQ&cJxHP`b6(3 zbL0k`=ql4fzgle;jZzW-_uZZez7(PM9g;leAY-|S5=FT&B0h(jCj_bG7LgS};if}>-OYIYod9OjFoNa@4gQDQ`d{1Beu;JP8wvWzBK4gxD66np+^|02cRuQssC=1m1tAfM))Nuy z?6$4##Efu#y|F^W4+J<$yI`e9!7UI?3Vz<~4{5~AfT~5SI1Riy-a}E<1t;!aET#_j zoh@Jr;*Qt>H&C)pg9T`WGr_2&0(`qq6Z1iWuRm>S`+$j6>gUf>T2N+ea&EIz&L4$C zMwH51eGpk@P{a*3oMjYjyn5~AHO1JP=k*(g2Q;@xvje( za7-$p=HtpAg##e~Wlz_Fd34r1I>l$8sNjVu7@-C%7wjOlsQf~J2nS-`pwh_>_?BTS zA9*vasQ^O&Ual3@E9&4H+lA7eUT}R9<=F@0SbvnI!vmBRJXrg@+KQWf8>ZiSfpG=& z=_(vl~$nhBd}n5!`qR(Rm$bn+r?tZ?y6*BJOCgdM3^ z_bDgKfZ4|$zI}AU=(Nf01aV|jE`I6teJPNB>K{T1tuZuL9+h~CvV_W^ zu;NCh@n{nt1KB63*Sg>?B})Vykb`L~@}?RO+=}FN*y0*hb(go~WpL_`jSRand}r^6 zsu*dsz6n=aM9$h5M=dVQg?Wc@cZlGc>&>955R!-j04o!!>`FK%b(ozhf_OXo#UV9i zE5w&XJ}ll%Ji`|#Gmzv03>H}t%kK!73t(BZ#lQn4i?S;*YqLStMv9pOIBFYNI9t^U zaMje-ZF(rV1eI$SK|o{KE@#(OhF^?k>5T&Ms2xZG%V5$@%u=E@0FH2RkqU)9;@sl zK~N$P?Z@RH#K<(}O`LKi5CqUnQHVgRfo^3CM3%%kW4KNH)7*;c7G`U_dW^fykz&&; zf~_b$Op+s8ol$$a(FOPUtKilj9w& zy%6%s&E7bAs5~3W6ep+fy)?CZl8=WT2iwzg)TEtjA-e6MU0+_VYYSlsK4VysFXC>| zoLU*vE&DP{p=>iGMnLT+8M6R|KM#H2#6V|>XAXc8GI-A17(kv3HCCxc;J&ttSzhE0 zdiOP8QSW>U=yFVgaIopuwiRFeDBgiT0D)1X)x0`RIS0 zsTjN31$y3X^t;P%`}MQ6+6{+#)xia`?EuqOwn2gc!uS7i^9fm91LHWK0cs5I4 zvF&w*#;OZC??5=I3!l*7)bxXhYC)9aJk#2_$YKBLfSxUnx)I~YlTGIwk!`B4$mNrM zDhJvk=+zyvs9Qi=#aPMGTuG|3G(6-Npi2sZCO*GS0fI;xJuX(<^n+^T5ON0mTs8o) z_Huie5JEYupzTNH3MZr&s@{{d@L%Zo$GZM&$;sRjcYm<57fyo$3GpkdcXnd>f-Snr{4zoPS^@hh&)GVV z-tX60kwoJA4rn0H5x(>KC6zc7Q30>dxGO|xLZdX(ph$2kN^5hfm8KqLw$sIVOpPx9 zDRC=GKD@~({&1*2c&-=fIy|oShmgbfS!hGR*tG+qYXuwt-LT&TLLW)0nJ8sqD?^ku zeEXjsPhV^q|0#M)*X-T@VztXp)&L5`w}b2BMr6{^Y#?~Zq?C$^9h9cHNU!rGx(-aa zA!$B^h8ljBkv6#RG2oU~!amLg^qXUdiEG*+TmXsDBxYxPoU6ylZGQ$8{O8@4Hx6&M z!{@F8mX^^AD_VG66MVMMG)`2eLenn>ea=QCIffZtz8i)z4g)8fAJ-#~N;}YWE7x|S zL$@3PXvpq#!6xM8);Rs05`j0Nlx6b=i=*6-2>_r9#txeJ3WyZh1}BQSaN(!lGeJAGkL|!6|NOY2)J!{=5m$g`3U>+c7^^!J5LAJ}!A$8;Djh(r1l!~<(%+%= z|CF@laG+Z;7qkkbVGpr2KW<}3xiOLr6IZL9s9w!;0)#P>Pl?uUP+MI@iR|2R*3*=^ z6Tt%IuyM4>*lG}5tr)8`CqqA z(DA(t``)2Dx5@)^)L`_G)-8rxBA^BTbB@CQ3gBQeUDwTC8thI1vFE=4P#`wh36iA5 z@jWj&WgIRARaY^b2y6_GSUtO|H28V6fldBy!P848-J9oszF#V$w!HyXm)KVQeW!LbP+;H{6U5xi}vTs z_K9SK>VYBK1vn>1oV=)@-M@*fS|H0aO?@zzF&Q3h~&mr3aMzh_ropg0~a6Y-o z^1F8b=bo8aA0o0Y!v1s%Hpax3hLLfEf5T}mf_zfm!|C){>K_5LDq}z75j;||v^Z07 zsCW~wx^R|sVCR@+eC=toeD=D;u98soO2qmiY7?H5w2#uJhz@ep07H?!3H5zw-)k7z zOAHoJ^M`su8n8&8r{IeL?4w1zI~bIR`TCI0cV7ME!&?Sg5nkj2Xz7)hjnUE`VT>hy z@K{^(dL?o?N#srz@x6j*>0RKvatloWkOCvje%Pe6_u2;0OJSqnuoHwZcw_;1#^jFD z1;~580RjRkQ3y%J2gVqpiIK_1y|@S&q56@-R*WGgRUgGAi#_#{N~opl10Pz1f!YDC z5JDazX~n}>=O7sCW+pWaHY7AskUpcCp9)Hp%k9KbUXVgGPFw3G#H+T-6n+Px+`a$E z8W%_vT`EJ!1DtLuH@6>3W1;mJVs-Q{`0efjM_hk6t@B#mJ*%O+%}$TvYKOI~+kk&w z-67X7mrJ(TTc681%D5&qT8F+oWbSdW-J$;NxySKD|FQ1MN;IiwcE?|&eX8=(VD@TB zs98bxG_dq$giDB!8#{2S85qD7$0%C7I?LHlH5^PZ*kY0VpLr9kfICAhMx)3Y--3 zG(FM!T#~G*{szX7#ah+4QkHrjL26|ck7NW=CPD0y8Pa5BLaCGU7UBJwz_ls^H{?^a zjH^Daq3Jpx%4Nc$tVCv7%ue{3+}QaZLDNOB&JHD{w!2MLQN&YMo*OgpB2|1f3sg}eU$rn6~(n~Ki0(!za=|S zP2(*ro5tWF(+>EZx_$Qi1y6qchnf&Lyw+&2S{wuqG#($b2w@?{t_W)#gkK9{T|T!w z*IE45Z5D8F?{T7;0CN40XyPw!cE|rd)cU^*ss6V`UoN@+KN)EJyEMMogB1Up(3}5? zlJ)=ntn1&U@$b@DhEu*cL07Mp^iy0)j*guv6HM0m8yG5CR0=|KoK&|m)}e{$2R;iv#xKzXd{pzrzt{Nl8@m6$?E5fFUQu^! zyEQwgUoT%HKlEEZbJuPRFJ5gnymjn1H9mZEq(%GlO%rtukq6Y%Ec2E4$9FH+lHr?v zaKn~Lz%Z>0+TAUPc-@736Mzj|3A0~}(fc2_9~4Hp&ixNXwte9Os5r6qNtQ{O7+ZR| zhj~L+Ugf(kuezfweVuv3xO}Nz!|dr{aha5bxD86eS*1PT`^aH8lA+&|b*NstGpStH zvS?`=Rp{DLpRKW3F+REJO2uFBD zjaO2?0DwvzL^9Ohyy)pVVre&_Fp$~GHefe0HTC{ny#DeH`1fvr1%(HTA@x|FOw9y>QBybo{N0EEd52%Q0z8J>pLMSP zayM|}yHa6HlKPnCW;ho{JiX+$udAY9P<%8>bG{%kKJ3+~dQ!QuLULtC>$@&eSF9-i zv4)GZm75aTSNaY&`fRL-&X>KXdJ7 zyCa&N;{i(ZlV1956KBdg6m00z4GHBR)^^fQr*b;`I-PkV5w~xZXjoJC^^&}yx{l++(iG{%q3NloQ@Bln?9^QP zK=2@$WH1sWMGKn>kH68*ZNTkZImO>0yy!O_**ak7^ig^&`o;?<|A%@yBC}f*&d*Ow zTaKm1Hg(h1@E2zqsThS4oLii0#0Ko#-vrWXZL5i{%MN%SUTo=W;E|JNZ$;J}jUUt< zFY8O;-bfOhU@0hRAvYa zY{%kw7xom7ho&E8CSXkS>pVv6$3RRk#47c{>kJ6L$veA}v;Ice>GM-$w!kOl%<;xP zgY{N&SjcC6im1+N-s_DQ+J3#UM7Y13^Dc}d1J1o7z8JKdEQh4!6n%Hs38EY3%viUF zrBYp}n-#$d8*^2hkLg522lrOHnct@Po}OOq;otEKl|5ZmI;=)XDgA*~z|S=T%8lKf zb;qO)4GH#L4!WL=q|&xcDq?pngX`BTDO$u#U;kCMJK1fX@(~4lm}5SOpYQ5%k4)7K zu#M6Rie(?3U2M9XSwpCgqKWnP<`2Brms`4ArY_jj{WdaSMa?4VrJ_~>OK}c0gc|xh zOEqrMP%J2{Qtt8EyCRvV%3jpvMlDeTJZY)AQl69?q8zTpef+hJ-qz=NOU^1~{7V)V zqetp;-sSa`>h}m~Ik)D~w++YQRBkOUj|Ri9u684>se^>`pVEu<=R4g6`$3d#IecpZ z>7@=wAOgu4SQR`YY12MHN=}!#z7nw1P|j9!J(ZuAe%uP&R5L-79E!b$kfQgVOAFl~ z+!2~E%Mcv&?0eu_J&oY{`SGxlo8XRo0O5o9$UnTU|D5;qrImIu8Q{&*qtf2?m!wvL zHW%;lXy(UO)IJ|?L1HzSP{#EDH6L{wnc;>7O z0$8$4ZgEPF~!H zQzjSi__<`x2)^sCYa-`L_LA>wG28KoUfUzfUSxq^jGC~yF{AxP=+e1OQq?=(bhzeS zBD@*lzA#ey(EJsTg4MdWCfHl*x2Ae$eKfYFPallQB8b=sxlPTF_Y!|B$rtHrDQUcD z_-6aQdQ;EjtwjNse^bWth}7`VHHyN05)bMS4Dik+9y_9OIzh`cFYkV(`+7|96zMN5 zM(af!NlndpdomLyZ%V9r#3DP6Gv~bb%5C%2Ci5JI;g@y3Cqla*lsez>X;1(2~XxPc26#C{!qn@P4&d5MyKltL=483D^wD3Poy3sRaWz+hQ4@g zdL{9s=hO5)YpqGE%c}4_wr+2-56|WHx9)zJcsewz<2ULpP=SlQcyGGj{6Uw8GpymJ zH+08osqy8rc;^0UnV^cvj4i-Fre*XC4+FZL3HTaNklQvPZZHeyshh5^PbBw_R|$iP z-+(K_LX6P(`S5;pB3R$|2006zm4%b1$Lyv5Hl@L`yFBPCzgu*^@$7kgUBrm?og)QB zS|MaFReM z%dyJ2EOX7WHha~Mrf8Cd1+JU!Nag&(Nqpw#AKVU<1{awidu~pkiGsO*!jzm7_@yJ_ zEXZO}fEuQ*?@b(eL0UuIS&OxtNJj<%jXRq#84~Az|CRHQjiGA|a#l(`l4Dxb9Jj|u ze)$ZCL(^^F?UkY2m#wlJ46d(AsisDW`+BBv2;w?6K7Z`QK^F91agS(?Y zlN47}mDd}6G6xpt@3}tJ^&D1!qw?is`A#jGgGI9peRQ+f(Y9$9altyr;5^E_tPZ`( zpdf82{voyQrws>*eKMtzrX!C#Z!Owl<%?(`)QpkJ%i_;6`cBM#lqby$@7Q!GkL%Zu z+sjYcb{0J3+1l~$bZgkbfSKO~w0P39yC-$$WMr>rKbfAUv;;}%I6&}J0_GjG~4&fCUcI% zH{$&tG*oCr?IYyxq`s-rI}oMM?5sX>I(6-OQjh1vFp+1EJ$sQcCbih1>>8Xt6(QdD zD<+rxrOjzA2^;~r^Y;6Q2D`dwT9)FShPU$d8w-*Zs555^*M2fd4_CDm-kkX|gx@^O zJBe7-K1UeF@iSA}j+DQ?oXu_*MhT$*`gZv3!!S+fdcE8mXPi!z`Gu(&nOU9B{p2pP zGJ3MjC3LTktaVWfPxhgfrd;(eAa?igRYfg6g1$$$14#jSsf>YURvZnaz^+0y3SYf< zEZuWU_C*eqVR&n^hMYJMmbWANbJW$@e$z#kHj~lFw6`##H)zZQ-=~llq;{Awj43Q> z%?qa;-)ih~9=>34yLz=lp)2Eojwph%GW1Pt6zDy{rcc>cng z=G=&zq5E+WX7;6P)%oWZ&rFI+e@fI^vvZru2tgMsDwV`BcQtvf3;RkxLO_fnVKHg9 zGP7seQ&PAL)tBV*v0)E2P1-^mdu+$qfCjdt%9M-zSM3eTmbh^Nkt2cc7jC-EKj6GK zbXTFVJCHAFqB>FpYooqr)z0)SuB{0p?>wv1{b?TAx~y}wf&#u657%n_w2~Aa^C2CU zP+G)|=W`BM)6Qaiwa88}6SwrEa?Mp%2od&ETpbP#7b}VA&R;6iQi$a)%%6L6Lt{rQ zHf&%l&cia3TtRwyuI|CsoI(Y93W;+uz^zSpK6v6&w7;vrXlgk}XIdqbhMMcUj!T^( z2i%sI9h6+3@%VX#DF~d*(gPhXr3Q#~6ggRIq1t?WZ>;Cy-s^Ujk%=kO%^Uha@FGlD zO?nks`N~)ho%kvzzMy!WOJILGKTf{bevvrXU|(k}DqVP%wY{-D=XIfo{m{+r3XXnJ zDS|%7(n}6Z6$j={id{D~a4Eh)6$tWg*KF)dUX-J)vfq06j`3n*{RJhlIEQ<$*Tk7p z^Ud4KM>ix&PnpgoAeDu?eM~xPDh_uA6;(im*HRaM%-Eh6CzX1P6zb7gI%4!#P=H;9E`ci5Fz)CaOs`{M>qg8V9Ov_u|SC{e@ z*bJQYtPKfY8~%Uskyi4=e%T%U{R*J?143H!5A}u&Icr`kg6h7w+*hx=Uxfgfp=%bR z4Btf2tJ3`M-`kh>@Y)11_nn?ghB17TpG&(X{`yV+@rO$oM9V8Uckk=OnB^~f zuYZ{3dytGkM172(X?OAUHd;s%qJ%R literal 0 HcmV?d00001 diff --git a/docs/self-managed/identity/orchestration-identity/installation.md b/docs/self-managed/identity/orchestration-identity/installation.md index c7e45dce645..4428f2ae659 100644 --- a/docs/self-managed/identity/orchestration-identity/installation.md +++ b/docs/self-managed/identity/orchestration-identity/installation.md @@ -66,7 +66,7 @@ Any other users included in the initialization `user` list will also be granted ### Enable API authentication and authorizations -In Camunda 8 Run installations, basic authentication is enabled on the Camunda web applications, but the API is unprotected, and authorizations are disabled. API protection and authorizations can both be enabled by modifying your `application.yaml` or environment variables: +In Camunda 8 Run installations, basic authentication is enabled on the Camunda web applications, but the API is unprotected, and [authorizations](user-guide/authorization.md) are disabled. API protection and authorizations can both be enabled by modifying your `application.yaml` or environment variables: diff --git a/docs/self-managed/identity/orchestration-identity/user-guide/authorization.md b/docs/self-managed/identity/orchestration-identity/user-guide/authorization.md new file mode 100644 index 00000000000..9e9e447ef61 --- /dev/null +++ b/docs/self-managed/identity/orchestration-identity/user-guide/authorization.md @@ -0,0 +1,51 @@ +--- +id: authorization +title: Authorization +description: "Learn how to manage authorizations in your Orchestration cluster." +--- + +Identity provides unified, cluster-level identity management and authorizations. Authorizations are managed through permissions that can be assigned to users, group, role and mapping. + +## Authorization overview + +Authorization is a mechanism that controls access to resources and actions based on permissions assigned to an entity. + +Camunda 8 cluster uses resource-based authorization control, which means that permissions are granted to entities (like users) to perform specific actions on specified resources. For example, permissions can be set for actions such as reading, updating, creating, or deleting resources like process instances. + +Authorizations can be enabled or disabled for each Camunda 8 cluster via [configuration settings](../installation.md#enable-api-authentication-and-authorizations). By default, authorizations are disabled. When they are enabled, a user is not granted access to anything by default and must be explicitly granted permission to access applications or perform actions on resources. + +## Authorization concepts + +### Permissions + +Permissions are the building blocks of authorizations. They define the actions that can be performed on resources. Permissions are granted to entities (like users) to perform specific actions on specified resources. + +Permissions are defined by a combination of a resource type, resource ID, and action. For example, a permission might grant a user the ability to read a specific process instance. + +### Resources + +Resources are the objects on which actions can be performed. Resources can be entities like process instances, tasks, or users. Resources are identified by a resource ID and type. + +## Create an authorization + +1. Log in to the Camunda 8 web application. +2. Click on the `Authorizations` tab. +3. Select the resource type on the left side of the screen. +4. Click on the `Create authorization` button, this will create an authorization for the previously selected resource type. +5. Select the owner type (user, group, role, or mapping) to which you want to assign permissions. +6. Add the owner ID to which you want to assign permissions. +7. Add the resource ID. +8. Select the permissions you want to permit. +9. Click on the `Create authorization` button. +10. The authorization is created and the user, group, role, or mapping is granted the permission to perform the action on the specified resource. + +![identity-create-authorization-tab](../img/create-authorization-tab.png) + +## Delete an authorization + +1. Log in to the Camunda 8 web application. +2. Click on the `Authorizations` tab. +3. Select the resource type of the authorization you want to delete. +4. Click on the `Delete` button next to the authorization you want to delete. +5. Confirm the deletion by clicking on the `Delete` button in the confirmation dialog. +6. The authorization is deleted and the user, group, role, or mapping no longer has permission to perform the action on the specified resource. diff --git a/sidebars.js b/sidebars.js index dc838975c40..798f75d50d7 100644 --- a/sidebars.js +++ b/sidebars.js @@ -1402,6 +1402,11 @@ module.exports = { "Orchestration Cluster Identity": [ "self-managed/identity/orchestration-identity/installation", "self-managed/identity/orchestration-identity/configuration", + { + "User guide": [ + "self-managed/identity/orchestration-identity/user-guide/authorization", + ], + }, ], }, { From 5279606baa11802e76fc53db3ac467ea6e5c9081 Mon Sep 17 00:00:00 2001 From: Nicola Puppa Date: Tue, 18 Mar 2025 14:32:21 +0100 Subject: [PATCH 2/9] docs: add user management guide --- .../img/create-user-tab.png | Bin 0 -> 30281 bytes .../img/update-user-tab.png | Bin 0 -> 33794 bytes .../user-guide/authorization.md | 2 +- .../orchestration-identity/user-guide/user.md | 54 ++++++++++++++++++ sidebars.js | 1 + 5 files changed, 56 insertions(+), 1 deletion(-) create mode 100644 docs/self-managed/identity/orchestration-identity/img/create-user-tab.png create mode 100644 docs/self-managed/identity/orchestration-identity/img/update-user-tab.png create mode 100644 docs/self-managed/identity/orchestration-identity/user-guide/user.md diff --git a/docs/self-managed/identity/orchestration-identity/img/create-user-tab.png b/docs/self-managed/identity/orchestration-identity/img/create-user-tab.png new file mode 100644 index 0000000000000000000000000000000000000000..c67edf864e0e030c1b9328d79cc76fafc3c11829 GIT binary patch literal 30281 zcmeIbcUV+;vo(sC#fSouMMhDgvluS#I z9J|RmXK2E$?YyJD=j=J>uXFGH&NuTs%=EB(ckf@STD59b@%YMRrG0xC_E1nz?7Q&$ z`D+vu+i?^Wl-qahfZtdSD1=f_Y|%59m%nmBUjEn>Tdaw>r7;D?si#&?K6A-$VJeqR zHIIJ$gejIr+~4HXfYDSG&4T3-Yb-YPLz^Dea1xIz@^SrrxIahyy`tN#xxex@m$HY41(_>D9uY zA1X-Ct~$Y#K@4ckjL;8@j%(|!DGGQt6+koVITZSlhqiX~4Qu_Dt}}Ms(^PTV;>Cly zJuKHFsAW>bulBvE{>Gqx!<4qzXWIWxOhlu>m%uLtX7?h^y8Rp9Z!Fwf&*zBH^Ley* zaY<11{z1K~K{h9k%HKLGu#LJ5c{tS-IgSw&Qf~7qw9A$W*CUIYNqsKFc7rJffGjjgYXU*I{#kbtL z!+LI@D1}IcR}&8+FWq^$v28-yC{xqy>;af?bz_YSCMqfvobY-V#g>QW6x-m{7WiR+ z9}0@C&%7yi!hfmZ=X@09Ust!|qPG6^nsPhx#iP;=N^rH8AFNwz`AdLLucW0WYnL?Qb1(wz9OglW>+k{{0;i@EZ9w z-|=JL-(qheeOyE3$}xGYt?@At-ZQ*sj?3&hcI=pxt&xeuweyPqx*h&c`nZ|B{T&HD zJ|`z9UME3btgR^@zqq(K-x&cu0RbL(2albLwf!w;9&0=HKR@KJ&pB^wXJ~7F$KD)k zeGK{BTLxGMd+FoHkuUo3&!5j}>}>w?o2>2rH7pn)A996{pZ5&kkI#l%rI6oBTrqbx zw$watZUxf=-ytK+FDmu@{r~C8&u{$YPK}>;@(Z02`1RIbF8#+_)$ELI<*`=qo%S+6 zm*!tL|9bIXH%jp#L;qze{+#FUzlDjG*(1gGW6@;x%;g^7rJ#_bxN!dL4d*T6T`sM< z4Q;a1l7_?FsiVHW_o`3G?Rd_MDhk!F3i9rU_>?t@e29EqhC9vBc;$u)&qbA{ zS3}7@+tki;3Q<3P($nIa-y-f#y_=(0TwHZlv&A7IwU%g+l)q>y>*=24(3M*qb@txL zhl+P8woq={b?}(nzr9FMkFtsj&whOPKm7jBcgh_)IKQfdeu<0j;C#mHPP5hj{Gsq0 zxR3S!&HKzYHMecuxqmIbIN%Wa_cCwaaezgqVOV{>x#Znpw7J;!3L{t7kyl&x^*>D$ zGR7;wJQ_JV`kxx-1j%L2=2FkHI5b|p+SW2mzU^Em=`!2D zOeSrzFiY4!ija0y?8u;{5nX+q%Yrs=L5?fCZMkk?1Da-hLHe?hu zxn!AAdD5oCDzkbfI|OB-U>qjrqu97`JNGjkrGH0so2yPPW3ad}uoekBu~#aJ*$2O>vm?S^{4o zllWo>wvd@CDbLn2tH(RJ`wuGhK#YjY#&VzY{5K_K(&cc8(pMIV^k8Nk2kxwF^s#Op zJs>@QrOjjTrD>Iz{#q~HTh&OJCJ$Ek`KxOywVnZ{k?tb2T4t{W6l=(H?TpyGt2LFb zm2+Adl9O5NIZjg>r-Snp^|*>>d{pq+AvsL~F}n|+Jg+yTtiO6KKCS*DzsK6LbN^GN zH%?Q;X#288!&Ma&TT(Q?UCTR<=U$gM^I}GaeS?bXD`J{xyV=_j=8rC$#=*Mk=bH1r zDbVT8UmtQ9Z%w}cexhTO!;a{=x!y-~o$}vYP1^Lqx{qnk`0B5{x&JJvd&y6*=Fybr zCi&@t2MJawYi*X$mot{g)yG}1+}mW4w>laZ%~bq^P2OO*?zIhpC$mHiqf3*NH+#`C zwOZucdzH|7(ag>H7}=l+jz~8F>ztAI6$c&05;A$o0yk=&9WGoO;8XtOMsi;&T^WjG zohsb)cy~3|apGf37>*so&uU+HHhChW1AmQ%ClH%GfakaEudt0z@tp4d9PR1dTI{`# zYsqmS2!lW4{2?0u(cV{UNXWV~Yk5g9U~l#uak14f(BM;>NvHy0=Hu25w3B%A6=egJ zON%x(|CzAKj#n=YHzIU-=C zb7RxNKhASmT>i-X z1g{6{*j`|=`^s;;#x2V)skI|lv(ULk*UA6-W$_b(q1Xavn9$x&#rwJDI&R+ES7mHs za+%&}$fuWy3o|#Ugl1}QmTh~#)SHfvb2YUrX=})xJc~`ts&0BmuT}FqeEHHv6%sz~ za;jf(B}XJvHbc7S=0;NwZgE^weVGL}{MvZCpT_s|uM-{0 zgQ3RcA;u_c@Rh}TF*}n%A)DS3>Svic;?kv29{&-wAkJd?C1oVtpa*fLmdTCwKt_1! zob1wk{8LFms|Pgd%Qwuu;>$xn&y+D@*FLaiw%?9R85OY@SJ&E+7xW}E1^dz%f0~>! zevXG{jO;j4Z|sB151LD1DvrJS_D#y|>=aLv!nuf!3@dH*1sT{w(K0h>Wv^a}8?WqO zn@SU!K$+3H)$OANZ$y<(_7h5FR{EdAaVX|~Y+T)CDZ4QfsJz?z!%o7p9Z7{7IESU3 ztZoMjSDTW06LTjyjTvVLOxkQc6L<)x`(5Y{s&>srqznkhIJk{&L@r5|FITF1T$|*> zEbx9RqC9bPV^FkElZW-Gp^)w6NKw=B-6)e2GDo>@H!jsuuK88?H;Me~b2n~Ju{d{o zMY|O@md`nPzikt^-v#EN7wbvZUa1k-*OlwUSH54Y`|hkRA(DIG3E$J)Hz4Q~~W3WYYD~=QBpKMM#75cJnOg}U}F}Ir|?25O=e3;2R%RC2)(~e4}bU1(` zFHSJh>D)PMBl`kn zWfnW_YAbT`=$8jOO&u;bmGa{UZZ=vONp1sN zPfzUMSn}Ky&2bo`Mf_~uY!%l`C~57ax~@Z$Go0IAI5~b3nWTdG+S$ErEN;`EsmB*b z8e+g=Rj$;hdu`o`pFJFEm7&@1+v%}MCY8fh>JZypn)GW2;qWSCvbk)a>s%?h8%H-xL`YqBrAf%zb=U&!YG? zxi~trxv7JWv-6Y3i>uq3X15zWWOmdry6~V%`75o?ozK^5dMelhx!KGHw6rag724Lo zD{Hg~mo7D^$}&G>vi&^|wzRQlOQNn}@jg*M#B|bX8a=&D0vG)DenqyAXvZ^UUix4? zoVg!^FlT`HU`R##XZnxoT9bq;!Wb%6*YRZjn?-kRPYs1`83&Ko`!-O9)2{lHg#6fE zBiW>UnBi|p`i0a&rX=pGPv*_rQg(`ne5YPMP600#qD~kyu6z_fmfLtuSp^&oS>Py(guR)|2kk`ah^P41R(Ok} zl8%<#nVq(g+Eb#%!(mR|4UrBBnlBstzUu3v#Tg8IS1jtZm+JRjC*gMFawVkIH|Cm- zI_-#xr1@ho$|ZlVx~Y-{Oe}Zd+N_}P4ZKxs<5+_6-FT(2fs-;x)m33KSW8qxWyVa| zptqw#V$d3oc0|F-W4D}5^4yB{P`lD>A(Y_qy!&1iWxG(oeVb?}Y1=>d{WC9UA<2KS zU%Ya5=7W_mbX)Fuc>T;o3W0Y9(B7rw+5@N?^I(WLa)+QOk11;CeOE4la>8OlBgq5c zt1l9n%uMD^m0jdYIP#Fy!(ZZGL@Ah&7oG{PHOCbk~ zA07yNe3+wb%TA_)rr{3i;+u%IMFJBK@&sL6V$SUmSp+J(0S-Yzs}jKX%+k2|Q{}UH z#(2$>9&@3j5=tuWgGx*`=OH|#vRPkfDd&ufr(R!O@U`yB2`WH9d>Dj!GYINkogX>8 zPF~_`;oP~-hT`b&7BNwW^l{<%a>r9z&11rQKgK2c6u6ViAd=EOrRO@4zC3~TWQ>XQ zz=heA(a(UXF4=lO>Pmod+rz!C5R1;V-i}MCD%h*PITPqvB0dy${alYSZ}z*3I6$L# z55z3*cE*C+8%>ttlOG%}9KdUr0kvh&^MEd3u2!~iK6@y_wQ32X3~KnXWdfHqL(tz4 zK=5%zwgswv32C6TlNzq3SOC}%0MIok$^p>hsgv}dtn(L|zolEW3={KR#TSQUH?v36 zYb3@>L^>=FBf-ECvV`OKQTS+=yp_RFe#h}vTkf%KNts04)AEc~17BwdWIqn|mqDzg z9bjx07UwD2d8c@|Guw`SXe1_**FDl@@Ffy)uJrr#Fr^N-y+2xqzMF)uL`_CBO4tt{ zq#w+%)O399PTtJ5$6pm2cyYbghb!?>lIQwZa`Ar27f&2Y9v!lQP%0=W*Tp*EDVH-B z52o>QS9`{KVP}p?sK~cy<=~^D);eEhH`h+gSJM<}K4U8;<#`a)#rd{&hG8QjtzJK% z{aElj@6cT1b=4r6{2)6Hl~+erK7{GFO@*SJ8cP2ov95KY3y%8W#IG@mV!4$CjdZ*A z-b@|XLu8Zpeu2wfafj%ntVVK5XLNotxtt{#!m%Ka)LD*lT?oJpBi$DtUwx}s`b~*d zy1012y`Qre24m@6>p+QWzei7B0Z)|gx)cEML~eXybx@io_4h%mM(X|mn4LGu)msnoB@sIYWLYnj=sBF_n(UMv{SGe$fH*v;Br=;rGx)JA1UL0G1d*RRvB;Z__et! znq1CHT~2`;>*Vq`zPwtLBUL&UEa#O_pQQ0@RCVFjx=n2XN&nA4qKNtD3uba*zL-dN z#D_~d5Y%!F%luvrCc9nL#^Wkhvs3GB{g^D&%PU8e9L zcK?^Vb+5&Ru+8CbZ^y**lF`DqV|9&`x;ggd6>IUsR=ZMtQ6ju!a#0>Ym9DliyhJ^f z`+&I@x!m%9>3<0gH+gyQ+J$5MGJYI&@*%qSQ72;IFtEb4%@wGl zF?$4~Vf)H^4s{|{fdU^hwJ<^*jnH|>6&y67L-mDn>o5@uslo!NqhUB+H-B~tanrT3 zn{G7UnKuX}a#qPf7`?|+ZbOpaiAvxgS)GV3rVAR@I=GQ&#A=qdTO=`;v$$INF^VSQ z)}F}ke~j=$Hj8bhnWSPzI*|`yg8>lW}iovAigJY0WRd@YTjLV-V4;UufHf! zEQ5#}1B^js@a6vQratjO716F6gDK5g7Nw6lB91=iPz|`QDlOcs@3}5EUng$}2%>2t z8=+J28}6&~kMoy^l0@e||I-0vv_Or*tCreqHA?heXR=|r`qZt)*sC+EV@ViKR;Nyz zWME=SA*^KC$>Mxd$F}lBQ}+Tqrf*zQfkX{B{glmWQIg-dzIjr?>g_NXKEK=Y^fJI8 zJ;$NNeWINQ!IkI%y;}I_5WC`wV_CK}QyxpX&VT`WfoltduvAfxy?E#%fnRWV9e@PW zy`2XF{tWQA;y<0!fp;QQs#u?&AZHglnH507z#LHRGI(9bwpP1Z>A0mU6J}^Z*cQr$ zLuRt!>j@@K-UUeH$(>w6J&+10M13eC&Q7p(0!WlLr?33wC5|0dbmgp`ZuY>1jT4#* zNMzy?f(0-Ivq33)#4^cCQ>>foq)q1RXPH(V8OhZm9WSnAU5~l!BIXE8V#T!6T(u}) z;aqKI;rax%j46ft=K50kr(4BU4s#lb%j>|uFdpW(?1umrn)2L<4DE%ry@7(K3Lwyq z>#>W7K{f9;ag+%%!_`rXNR)hblvdmF5X?F*yJhb+!JF>GuOC+J>Fj)Y;)sAwwOX1* ze6r$5=2rp2iz&P(f}logfz#kenBt0{lCB&FuAx9Cae)Yr)sYlg4AamQK7pEYs9+#i zUxo-fd$b3F(NZvR1aZKej{v-#o|VLq)!V;N@vVKB-5+FFfO?kCq{}q~TZiDjT;JUI z7U=OE4(Ba2Yd>9ZBQK0$a*Q6|*Ll$KTK=I~!+RA#PMz!lV#k3#msvQ|upT~?W~r$v ziWw(@gFX?zK3#l3n`NWXQ7_jx6qgrf>RlToKDY$FmRgg9L1FOZ?#l5{suaEv#bla1 z(l)0jW?0fcGnsxB89(ry1Zw)EIpzrLInRkhoY9Q4dBCNR7X>{#qF`En|1;$>0MyscjaEHQl_;+gLmhL7=(hJdiS757@_?*VDtKr4HH1Gp zal(D63lnaf_`VCs*f`_;NbX^{HQA6Guw}GrGhmobI|5amtx~}!9?W{p#Zb?UmAGhz z6shxg?~ow8T^_>IhdU8Z7w0XuTO>EBYnKA)c!sN3A{fO?db#`_HFA&0?AXdCvpW1% z17KMnBWYQ2e!MMp)mg%6l4)f&-7Qo+)y9CZ1EK_0`0li zTS}@6H0#+cdIkxNCKy*hQHDS z5}t#;P0d1U<74wKd{@T4y)C!r!w=BT3QB4>Z-$5SSnQ*6F^!2$MscfOB`H<(b8Zn` zj!eElnc^*!g5bo$#YNFW!YFg_7%Fq8E}?s|fA0Mya|3hL-ePwWiF&0Uii)86*jHNJ z%YA{^inUROd6ChR495r1@r>EEEzyjx=0AtfqJGS6NX<8MMzf+`e02jLz`FxwX(+n^ zHwq?uC1b9ya3OnvU>B9FY4w_ht#}9P<_wP6U53K@ zf(zG-nLO8K8klAPR0OPj6(zYL@TWwyV8*{53rN#=b9tt(Z>F3z5J9Sr5NnG;dfpI- zjhU_~4^fdW`-Xa_`ga%jjVhjGO%;&e7?uYhth)x7gZD1dlIXBPbhnU^!W4p@flShq z0_Pc-0tp?RwS^>4f9|0(ce;y~;UzOm zppzd0uLZiR9U<5K!osN4wehM_Dfqv`>`DRL+?st&C*BzU4YiIj@ey#JS_OZhxq#HSp!3)n6aQ7*?JL=61(unMc>l zV%AM^0p%HHb~*YkPIQ#-;fgo}`T96q0c7ZG5C#Z>3ynXzAu*ndvs4rj zm|sT_9)RY^rw#KbP~*usy5(BiwjG^S^~!wAAk1+4kgJ{D3F?VM%G}B4ce~h;AZxEC zE+kKaxa6fl`km$}X5rh7d;MPvqFQXNw{r6Lh}+r$=d%+yZ?q!;QkC#p_fFYIteeZ_ z$(1KVOCScLUwM{6Z=O4uV<82w%LYi_awNHbQLLX+-yhY&+2zWGp1rq2WyLX#)=3I> z6K&yW?#pyXIzURA1r-2<+4ZOKe8vsv-r&`r+O+x5ll#J%*|0>LU|!wZIX380voo2y zg!1f*J1K``&_9hEjG~DP^&on1_VUQV`I_It{^m*kH{NR|`+TU$z8x09Vl)O_`8TNO z#jBem)SvMW;qv`BkNz(tTtEs&jo7^L!p)6jU_eS=nnuvGdMw|f8CqW=1#a28qXe{J zhappe=>$9x=&Yw6fk3-jM@j1^n%zV{YODzK?K9a93K z)fH(DQQrLd`c{xV833mn0O6oW8K?$IZDi4p=_N`P*7@(o5uBXD=Ege0DW9mYq8~&g zMc-0QYpJ^@fwHjy3R}s$uO!@tIA~G{}L1KsMQIf zqD`N_sCwiDy|K}_qyR)@z?pid}5 zvT6@maHsTu?McCcul<&&n_Cf73ZzEakv>#)0fm>zK{J}OSmoFZs~Da8Zj;$VWeY9( ztc=!Kx42U(jw7TIzDqV;dSS(?J?+C{<@dY@qR*__Sd-~}#Qw&0X|l;foC%EKowJzAX57FHWjcS9pf z&(Q6;lr5DJ)OFK4iCNOo&xz!o`PB_*wrIcN_)f)UiW;>qK|!Ap+0{7wD^=i~9V#li zg7H$%za(riwEyUtV*!95z*%iKm?@=0Xtc7cO3XBx1js_Rgx|`$w_oCv$8s^NBB{V# znTG_^Sq7&^ytq%y3)LU`Q=18z)kRe{qe|ZbGOmWq;x;)zz>7 zIAA<+xLk*^MR93nR7SZdZF`RWh`_{F;Ynsh0U@ou;6top9;9lXRj^D=HO?olnW4uG zj$Z1zZ!_C$s?kFde^984oNE(CU9T%j5Ogrx>_d}SQg|sM{P^o}2GsA3eG3s*K$bV^ zXyn)-$oIeExDOR7H(rG}NJ&Q?ZOP@L4uMlwJe7+o4%#+)3W7fN#Mh|HT(=8G!~Q}S z9m+cZ9B4k&f}W=_yAPu|RF#N+RweeNCH1x1G;5kR**P1cKlX?10ifja{+g6{7W>xv z4coQ9;o48qT*-O;Ph|St`Tj#X{AE+3{`Zj%W(#Mh`YWIJf%4O5t;P`{_A8#UTjYEG z4N)|@y}gCJA2{5k5HTBrG%IrCrIq`KFFyi)y&A7P)EX$e;cS`qP4OF$;#t6yzl8uV zx#GC*SNzOA^t6@<9g?u8K!W^vz{I??6CIg>tPlh_(04?k8a1j2)l5p@z$snIBfy4wOb2yO7T*Jk7O*gmU(qx{E_Ou{U^jGObqMM%_~m74o1Xao85av+5JAd%oV z6zM5bBSRji9^8NoQQ{&ZH2fZ-e-GPX%7Se71>M8u%_tf-h@yX;xR-bQu=GS)!^b#m zs`^wZoxaWkJ*)JlH_E}h$)JfWME<@wXn0nMR#tK0|)cEY%7HQU)-p+)*(7fUg9ya#b8;qY-bUqQZM0qk5HS zeD>h0xluto66#WfoQq;RJ9PvT_Lvo5!l?nK%VItEHB4R_U+gA>=Deol_sf67KycJO zVaQLd!l%30IZQ!3t?P{gSZM0-`w*(-zL|K)tip#FpA?$z0xFWh#nGm?**UvHIsjG6 zqnJX5tvmLf8ekS_GkTr{oQAUa!zPTryU*O*5~y2PV!~`M+D{SPeGE~x+j2LpkNgD? zk^yX7o~mPNlLgs65J2*2SkeCGJu*L*q(Raw(nWAT>N{`h z9a&bDe&8}Q*@aFA3{q}6JEb#yunSegFqd&R%8BT)F&XifIr_ac!2BAj4aGW(?s9o1@KX`{lGUKG`i*tmTDJnXkut;63v^3PyvLn`z&uyg|k0^s@Y0xS>?HZAo=@~=X2pAo9ME+hPJ zbPI5>8U+|lCT09%b zFqeVEPvkIr?doapB)XO$u}hVCatIBBn+YS?v>rs^fMoBteMIv9VIY~C0ll=k7YXvv zN6*}pi%+eQNN&+{E#=AVye2IID!f*cP^(_hn)&S$X+2i3n4VNB+@f<>lXz@vn~s<3 ze-o@@q&E(hXzbhfpK8S; zA=`VRRSy(*gxiCl{?oTs@F!j5ZMWk#SBn6q&q)Fl0^z)|LDZu zn*0zG!65Cr$h~FqvgE`OsJ5^-T83#Xc{~Gpk}}YyXnpD6j(c);5Q>3x&h<20mgGrk zJR6;NHsX0p4pPmuau1Pe#y3h&X7$ZpF^BR)z1I}3;WX;O-q>>NHc z#3b-ldN}G{FH%&zJLt?jT?L>`8`hDwd#AhIr~C97PJ zoa&_rsccJq`)>-y1Jj5AW!4o6>o~dI&JpVcv=iUK-EH4<{NpChov@zNdxjjniQfgs zeFxA$R;qrK+O~WieQSKr5Quwpf+~vUVC{W_^*yrVPccKWs2`Jf3QkH?D2xa<=W&0?h#{urQ~&+*9r4qj})!3@jza1K*Ui z(ia`9#~Fv?gI|s&Lk;DNn;9vFpc;;|#N!I-*D}HkYqAG8yT-wQECq`jy?n5rS>lCj z#J4EXp{FM}v?79E+h?RzOp6h8Z)g?V;mx;ousJboCB779T5}>l#rRaX;ZW!Hd>REb zcxF;47q<(iO?32r$kPEs)UMiTqY-t1=Wn|t}1-l*;+A3q}bAh^6$^yhp%uy>z;+7Po-C%%er|Ek@UvhGHY(H4o(}O>Pa!yc;$d& zh5GE#5W$qEJ(dN#5>q~kC|}A0+ugwYX5eD)xIJiaUXbI$p3GI((`dSiVFXPdKaN)p zgN^Ql)ICm16qEKg1w&2aauufFns^s#1fp`R?jvSiU2i#v?+hU*Bb(EqyU5E1Qi?&r zA;ypI(_0}Wa%TnHhqwejNji-=(*W?>ml>Sl?U#NZ83TA@zn2$Q1IL2 z5#+Bk5IQuZ+#v7*5_h1!cV95R6XcQZVOrgRl=d1o*(Ay!mCppKPTSHuiN8hUSb_A& z20kt5&N5Wo1?)|n0>-<7T!EjH0Ir#x9DOTMP6mEgl?;mgPkFICWApD7nupgxildkC zSzBU7{s&z^z{K;va)8;hBA5je^LrmUKy#?}rF*YZ3-HS+xJ>Fr zlTVTfcD8;tfpK`SV8dkmh;Q7cBFHbOck+tb8xQ2EcdeMS{h4i%w84wIcOIWeC2QhQa~ zpL6gtaPacp{T1lt;xsLtQ_A#4yS@L0w+wksX*JYes*A3*-)5oLD4)+&7 zkje|8kb^usTC5{?GXOLiL#GOT(PPkN(43@Nn{7iwp1ZzYg@*vB7ZwlNdO_t!0h^OXOH}4n(QgM&|Bayc`JPilxG+6Y0ex+gUG2qUQj1=BWweb0jeq8C72WZQ}adIo3Pdup@a>$I~? zfQmC{Qp50^IA}`(Dzy)!D}f+Dk%mwv?I^#&`DhCyG5R#lYYBQmWC4;i1o_ZFE6AyP z5eX}zx3{Ukz=7yv53+i$*&uxuu7|lo5Qp&`T0}CA(wj&bHK=LDJyshc%aAgmi576c z&Y-(D1b;mP5_@T+D3AWy6x0UVeA&(MV(f+_YPX5Ia?f`O2@O|&T70U+@)$U?{7w(= zY;CJ_HALhOkwRb=)RPf5DxY(dZ>Q5ah%jk70LGJxD5*+9_zkO)3B0-7j_u|#SAZ?5k8Bz^r^T^s`L{lJ`WawNt`9Q~JL^QdaGc4%YQyrGYj5joIL2h|2L}HzW!+ zR>x*QjCBGj>PJf4UaAH}-oknpA;nSAaadH7D&#LG{|6DtlLLdRsXiG1RniFmNBIfK z730PdFn_f3WV9Y<0X{TE_8w7HX64*W>#LIbpO~h@mN#Fo z3?Yk)nrADjH%In~kpec;y2}8x%rB4kSCd%vs=JEH!_ zYg=b855En(sOdeHR44-q2#oq@VtTWdv1ddu+a!ql2%JRWW({^cRDWD66y4gp*DEyv zXsPHt`4f2v>M{gV;jd#Zm4N5+ngRr7+a)DqKU`<-kcw^y>~2J{MKiv4dZ@YSSQm9R zT1q~#s9JyuSRt#^<

    pDBA>b;RS^#ra3XA{dTmswf7gK9l+`IGq=9n7XwP=W3lP6 zu+P?s$7=9}4}pZ&8^jl;UMdDs;OI`KJ93)0!oD{u3VHax4GETkaX)MTRhB$_c7!vU z=-SiN-DxXMbrLSP=d1At?Quh2hc}>F7atrqK&X9h&7)t@JgZS~#|pIm4LsR(DN|_~ zP-l7LqKMJ7wlaaPVz-OM)B1-fw$iKZ^cjcBjuC%pCCvQbJH+NT>~WdXc(|XriX&4y z!_B;XesnZrTr_{etxY?D4I9ALA0F`zwE>3Ey&|TBZykFn27k5eKcJgeGaxss3Dvqa zR3dr^u-V*NAvB^yfs9(YkT_14Jv)a6MQ=tx>$sY^O-c$>=5GR!X!FLl>PWQVyXXPd ztlgxdKsz&0=>T!H$%lnJ(Vl701@NNOCLaZ=Kl|?n+um~hW{)mM%YTvSCg$d-$Pbz- z{8zrP(uesXPm0IJvDEB=PIa&q#pH2Ve| z`O#)!*H;gihH+8h<3ASq*B1FRBLo<{}b86n;2_wjqwyT>+hee6}unKe<$W zSU9qZ|L>@??+sx9W7UKK%2wKSFk~HeL>u<@dDQU;Au9YU)^up+Fe-hw6p$k`Z&}x4 zKg941TRkfm1XF@E(t2ei@*YLjaFa+~aYj@Y%I&dLP6Lx%Y*PRuZnQPMAWekYs?T-5 z12(q+X#!>lF@D6(DIyO_+Xcp#ix&DYtv zB+lV=H+E^XLl8pP#>wR%*d4C^L|dGwWt}^sEXrhC!Da*0Z7H-)%11Z_YRLGhLZmLK zMuK)`vOD%3JvbJhdU+fXa)Xb(5jaqWs9J&M=P_7l!tj+NwoO_l-*Dw72(~6~7hal& z%3+Q5br83n=WU7*GQZXqe1fiEeFCclwaEs61^n4|feQE| zl2dth*)a%j1l*#4clT;3Oxj0Ej$gC83qa) z(+6a@+Wc4xAJF!B)QK#2incUK$}Tise`{JBVN)&K@?v@cJW9Y`&s2YA$&C9&^q)Y! zmw;rJUnI*+X)H~4edpil**A^ET!APrhvGY(MR1eX`Jrc-0<>}J11(n|(t2nHRNm4^ z7DU55ItYkiP8&rq!wwG6^RvtAh%^lbbk6kib#4RTVGC8)|Ya0W-s^EBIm^+&ryC zVz!ACRGlL-#-Q$uYsyQI(B-j{1Sq7u>9(BBunYy4zzes&9Vgsf2H~84n0&_GfO3CE zI-~&u9DWRT%WC_EiXX<$V=S0-_CCmO4pa)R(=&O*Wd>N}$MNEZpDAhrCLo5F?` zt2FtK)py(4_Z&+3Wc$|RU1DD<<^b7wbaVrWF~jZZM0A&N|^uV$(`# zwc{CP2MfYn@vma<=VfCdhgHjm%JN9;>8EObZygkrPd{kV9qOI}J+Bgsmn9dH#n*Fz zh`!G5-b1DTC{SiKcDyDiMe`Ng*0#OQ<$`h2p(*+H?KHfa`e&LEF*(4HAw)GTDS3fjwvU2|-;ifQ#VB+4f*8%CN zQPGrx^bzZWNQ6h&mdkz46_Q2V3+}0^i`A;p@Qgaip*=J52c&PP&zZP)A*5OGN8^=8 z@!vwNMxujxqnS7j2b}=xtv6VJB-0rI*VmaM00JE;Tt{`LGL-bKgQJ~zK0Sgv{q!Kh z^0Hx13@6lDn$*T793RdH)L%vQ)i!AS0iE7as8@dsD37ZhxcTf=BtgK#fbg-#Oq@b1 zQM091nl)@45IG&yU#$B}omOFXifEGl>5eDsND*un*fn;G zaTAbpW>Y%@4CgA0Sulk(7f;{d?Y_OvbI~@C^sG(GX-BJ)l4IWXKCu$8_9Q{o+SDT? z&JDJ(d$m?*=D7w=y)wM6eatbwqj~2^oJ2ln3@0sfT+mISjFVP=_>XMDW!mM9gd1^9 zeobZ#oMI=poYrILi+0|9LG7bKSe5;&sOOK;#SU5h#-E_YVb;W8e9A}kiSL&V_r+?0 z>s`D3z7cjQt~En1d&1nEBD>rd=kh$mR%!xG8U1@tSisYkkIGnJA>Fv2A6knV#Dh}9 zVdjtQBgbn)MX?i!GAKUmSREB*!ZFbYISC)T(z>)BiZWv#6z1O{vlJSMKx;ll3`XVk zNV$1OczfPF7s*_`(c^^$Vx2Xf^~Amn@Yzm9dxX!BkYeetoS>D?iP-DkZ&{mK4O9h{ z&K&ua*p(xh;Yga4i5Yu0N`g=+J9c9t5j&!Sx5y^ujDEb9Z*lco2kzOeV()a3mSt%WqVmcU8~O8{ z6H=czxtBL*RpMmcxxVx1-Df_+#5U#qXhiuxqmu4Es&@{~lHPeEKBrsPvw9}WS=*Ef z&kfuoLec3Fz8mD>z~M`1mUCCy_G=X#BrSL+L_h_FFI`zs-!>mx6vdMN3LR?Qm5T(d zMGouShmN&U0TM+l*bAe7ayFpv+R83;vPBx2_fBZ4{!In+|7TyjchXmK(xIlVAj{ts z&Bw~!l-m1Nb5>@6ptV)@$^)1&7*BluyMfEGB{eiDIPe;AUeAZxa1r=qU0!Yn+ zjpq29TR~vkpLX;J>eVV(DuVXNh5x*X?oxPN1Zc}8&a(r((sLHpaaJ9Ns$YtF1{W`0 z_C1T{M&zRMV3G5JB2Wht`wlMtGt^xN|5?>PBSg;A|7_sz$Mc`F`rWwx51OT-?#Y}0 z7U`VaUt96VrWHX)3%Z8^q?md`A+eust82H8?M)}8j`ADx89bKgmJSbgQ0sE&Su~g; z7X?yFEA3YF`fwg#Lej%T?xD#Z?#gKcbCB@~-7sr`*|re3+JRmJ0@Bb-t6P6l3XfD& z*tYL|g~DHLp|k>$q~puqbQ?ep=|CF25UQ7HhgryY@HbWe*PwQUU@mC(b7Ft-3u!P5 zR#e)*{N|^Fjg5w(;2TW-rT_#yTL*2%4;T9Diz~`76rPysD0GBE3x6Ks?-z8d#4u9O z!vxs$sRydo>R@b~T;y+IAnC?_?*jzQ44o0O03jlv4{bT5Yo-|;7=aSM6mo{mq&9-t zmyU14KcKYw$MbyT`gB!~#b##aP`O`?!59x@CPWO{3x#`4`R0is4es7nhi3>axG9#z zADyu3Jh$QU-z*`CA!zO{g0$|=f}BY&M7H0X)O{Bd;ulyisQwVw*I~DB%=B_Ec1ZhT zFJntIN!I;67VMJ+LcYaIWBE!O`D^W%@X4tG;$cVQe=U#PCiO5BGTHQ%l|t{OBdI3U zoc&0#8qzcn>7)M5OvuL_p`M|w?RJGy?4JAAkAjxa<>h%Ilu|Ksgxg=cy4?-w`UDS2 z3mRyDXkSlT-Vg|FVFaPUO-d`soBE)zED#tK!NIRDuQQR5cF(f}zQ7}5F?Jw{FFS6p z=brLQB~sTeKWQO@(ipb=l{o4>E;& zn?z^r_CH!)HP;+ZRW9kwTV0AHnU@eYTgD|%)!s>3Zr~2syiw9?d}wp+x#C*!f#Wh7 z^fr}r>;LZTrpO8p{UDQstu)1oncZw~C!%kqw%Xi%%ZO zG6a<>tVnB55R;5;Cbm{z?0+4q(78;f={DK@NN92-mC>eaYeGaXe+#tMmzVoGz{rx5PJJnO>M?GQkQ2M{GB-t+`XO^%ITFv zxYwlW$)mPK>Fd$R(lSQjq&vNb4(%ND#Ba2bL=Dz-{lz9yHJPM8x{T{b_+<@|*a!1j zN|T2?n>sfWQd3(!2#;$0ElLKQ2AfKiOlJmaMFJDn?K)l`a-GT>B)U8Kx7z-0M|xm5 zXJJKS(?8%Z=6R8QquVKEIYEC(pVTVpN)(>z|4|z)r%yG1TVd+cEte5_A~X)o=Z&;z z`lx0Df8C&rJS9qCvxdm_dxbybv;q(zpV$;c{QhuQlUgs+WOIbwId|w-%xE`zpp*bD zua3rzmG}FRcA^ODP+IUdK!TH&N9zbujcYRrsXSJs?P-|XY^6fC_W1nILNz&2%3Lef zYGP`1x<+&`Mr(Ylg?rWgV(Eh`(lK9-?670oqPO$v z?`3FvzRQE@U=LXWS+w_oRCo9ij@`pGliNge^R4#yi=-AZ$3um2Cp~teHp5I@o`Li7 zC&e(=OSGFWlIZeY^QfJU;q0Ls65aG)Hz6|&4YZ6~kB{hC$WD0^^?zg+ydr3Zo1&an zW(V~X?(KB)3^gX;OF@)HYyR@Vjn`yIA(p}J$&?sYDc9y4hV9Jf!YGV~U>XBh4khdAMTeg2VxFzlO@F%LqCA%z=3t*&J}GI$e>{n)CdGj( zpd(*`gc~;XUtSc~9M7}Td$2aADD@)AFJrVtb859LA~9=m&e4O;^@sIby%M%{~SyQ3B7a%U~}4a8k>{iqy!#b0FE)xZsHgIA9>DH`VmOKV*LWQ5q2|k-^5Jc7)F@_mKYbjg4p7 ze5U*}^N;v3LOu()7SY9h*?|Q=zSNz)F77OL&&^0+C*Npg8rFsCmEiT_MU1OnycreA zzhniOUxgD`+<2O9Mm{9QOBW;;RnT6GS{~tJ zoN3`OQdpSyl6O3_slGkybkusKU4pd5#$`TTa;dU^$ZYZAMw$#3*QRxQXoycc)XkH< zfc$oFsA1!bkAp{OWb^uptw)l|Tp_W6szWO%bHv!{^s<%vq;oUliiT5daQJZRwaow? z9x8rvo8qA(Bu`D+ky1Mn+2#nJ-!R|?%)^zyP2gz*7E1t+jEjDI1NB8tP#{j%)!gt`I`En4ks9L!jVi#wh{{^|CE+T9|C=1eEJs=^Y{iE|r8#J`n;Z8kcS`!v> z=GM8MCwf_n(9*CBW~vwIIr#mrlYmh8JAVzu^4dviS}X=@%QK~g;HPQUuV;lNhH6QO z0D*S=#$|&1*D!Ix!J2BiV}y=pCzK5q$J-Q+xvkBVm#?i@@WiXn&;BrDH;+-h^J(K# zxn06DWI6-JOQvGePUB<$`e>u#+L~t${$&tf<(Y}6ieD>>yE17-i#xHM9gm#wLbWev zixoSat=03Qcpemt;6~=uVodob6BVzXb{nCabMTm|>8&6z%#3e>>9S*guNN}Fcasoo zQE`tLqwlvo$0*4vkE`r>H#M}r$;pL(;(W&Qbf*P2gG>wxw5rlKnQ<}|2@d(4&%~Ac zz{Bg>q}I^+;9eRg>h)ry2|oJa4X42}&~8yq{uqr$DDT zKwIf+ZOiIJe6-;Rj=6<65wBnFJ`!!EJPXWY_L#*7N|%n;)pW%U%}!(<#8M}}dEQjr zEV@{eX!=8?AXmFb$F}?3HM((tQ~_@_vhLg}545o4(=U*!FAQw27uZWh+aFD%n>HEX zVB^#E8F?Bk8U$$22l=rsk(?z<|jx9^hbNPvZ3D|Mn z$dMlcLU4}#n?1^C`9`37BmgmwNx7C?MkRxEMJU3-!)D8?f)4f{E{7r8iXL^ zm1$hm7x1t@Qty-X5_&@8`?#(Sp`M49h0iPR?zZ!Z$;qv*!b2tC^e*ggd BWwZbQ literal 0 HcmV?d00001 diff --git a/docs/self-managed/identity/orchestration-identity/img/update-user-tab.png b/docs/self-managed/identity/orchestration-identity/img/update-user-tab.png new file mode 100644 index 0000000000000000000000000000000000000000..354d50e818c93b6b5a939dc047067e5363698c93 GIT binary patch literal 33794 zcmeEvby!q=*De+YU?b9qO$tb-qVOmR7<5Yt%nUFL9b$k*iGWI~4}wzC46US$gwhP5 z)X+oM5NB=Q{@m~R{yNt==lb5~x_m_T%${HEweEGVd#!n-sjkYji)|Mj9Uar9KQ3IS zquWNHqub29gC2epE5#8=N4LrNwz9J3C1qtEO(&eyZF@^Px>KQ;kWc)|n>eZ!vu-Cm z3gJj%mJYN!HE2PNXP&n|h{fTu-gg+|!Z@C9X-mk@zb!;#$d{^7RC>>Oj3^`Zhl`nf zX`UIo&-@r|giKu=Yh%%udu8^gVVR1IwZHYfp22XfblT37M%iLD+3&0aS+!!q_Lbxi zYmal}_5`)(#hOGXBzN@Hmjyke1~Je0QldTx9%>kU!~K0z_Zj?;DTZVN>GC0?pIkR$ z_bX&dU+aHU_l?curuCun$5Vk0iLuSMJ_mm;vAGv#^CPhN-TM5!wc?Yp#*ZH^TwWB@ zxWCu2jt=ewi z)OFUqdPT+@hY>Qfz}>PGa>F_gN(4StE;P! ztC$eZ$y!)MT3TB8jHs}vs35#T5but4Hggli;*b92CV#un1xviS(`^Um+c+!_a$mDs zID)f0FE8>zfB)|<A${J3vcP9jKjcZIxGBRYySG? zf4=zFH_8bkQ~#%>_{%!~`YkN9!Y(=Czi*ntF3c9rAUZlFx=R<%-E`YD-tAsw)L*PP zg;U|>J-`3+@g!;6q|?`wnY6Szd-%kkv-wPFB`}L;JH78Yp;-D{BFVV8^G&hVjw29{hF8Habd4WTC(cn_W9RL}a1GBxR6>=k;P1kdS(W)q8 zD5I(TXuhElWBoD856flnJeBgM=!G5nB6VyHk{)^?I>=X)>Z9W~nNiKf-coYW5hw4` zZWa(mDQV0lV`Uf9Di>&>s$7qX7kgyscXJ%JOU==KSv{6s$`!!j^vBm1B1iq1*mK*5 zhCZWha*^WJ+)mr%;nq|Gz3`~sylxkR4(!c%Pm*9>HUs%%c!7re{7rlK^@Oq19*fLk zN~~vnUPJcnroIx|Dnj1&5aOE)gI zrD0I_+0<;?hnD=7$K5L13aH`@{tpVWtQ&$xni8wuMPb!qomj-Pj)ys0?0 z5c6rW3)7mSho{a&p&o0(J{tpN$?YlH^sViPzl+!*$YjM^agg-HuEajHR{PXVu-B`teD`eP$r@vl|RA_H7(D z+BOUL_~rUx$$MQLw-y?mXs!#HE!(o^X(6>lHj@h*r{Mj@mD&@ki_e2O@b8uxj$i6y zDLs5L&dcdav{XisRO+Z}mt%E!9o1*CFr(Lprd3E;s^2R$EymGf^EPlu%4O+iKy|MP z4+|w4uig=7hHqV8>*wA$45!G@qAco&eaW8_iHd8tSDO^qZcMD&r4dgA$<5SU_uy5g zL>u@wnpX!23VS8X^xzxh2f6BHsYUrqeNRYoR`t=W4T>9HEtQgJ&%2RQe6dpAE>{-9 zM{+U4i|41GvWfGF4s%Fi4ds>x!lrAE20stavySs#@KhI36Omi`aZki)pys>ez0TD& zV_`GT2EUEOa$%q8C;Nx3{#cDHT}^npR@l2HBzoVw@6k!y@`0i~3QIpSKTD1419C0whwfjaxtbG4ya=H*rjB%|F=W~E;pLKN{?w?b_z4~K&|HGp}4;9x&G;+LW zJ8PVF5bwIYPl(_P*v@!Z)2AVsdUxCtmi(>f;$-Mgdmn4kcSd4oocDE_>Qzd4tsO{I0BF7l)0`v8H| z5KHFF946=4#TeHfJ=+0oKkOta7aq}w{d*R>U3(Q>vX^P!f_<{E0KmWg91w zXQ_E*s*3B=!PS>e#+>b)olUUpXf^hnSY9wN+^)DtYzSwGGjjN}Ei}&Sk$%ZB4D9eD zzUOrXh3?$TUm}a@x_f+R6W7y@&@Agr15uxH2Hr+^s*i^0JAFB>mX~sk%xn;0C^eRn zb=jy3Oixa8RdL^A{=QoNbb%vOb=ir7#2G0y!Ka5scuQu&)3ZI<_4v*oMcME>Wp{Tu zKhl&W9k3vE77{n-Vxr_dUC40+a@yU2#8{6H&sBzN%9hXPu3FGq^GcYba3$`BZa*J{ zzQ#t}(lrkhzqK+qBI30)6~vgh2W^A4$_P#c=lKv;vR7h5e%iG56pv?;dc>zVUAv~! zyyx3RoQE4lzb;MpQw~q!d}#((Vq^$G-qHa?N(2GFeGeB$gZ!dlDivEeaj0X_Z#!4g z1SwFm$L*-X#&SdCt3o`-)IHP%i#cesbh#U`80v~^bMESPU~Pit+e{QA^sHV=txlDj zkGE$awxM#JMm0I#BS4sX|EtcCYBaJSvk=^Il8Uqv#axax_ z@0%eB3n$wnhrL=&xcFe{N=y11jW`8-^bDAg{PBje1#@ni?n_*RvD?(A?fv%;s3*;@ zfql}g6&VMg=!jS*=CVEVbDABC@WfvL>uTryZ(Po~t!!MQ$l(Z$bI)Pc)_r}yz}_wNJif)??EytS>kC_E?&1)hXP>j`mPEyZd3^ss{V$eCuR9#-bA? zVy+^$GW<59mM{52gp`dl=~c0wlUZl>?F3`2f6lDkfs^V_+l)O0Grh{eCAVPPBzwKY zxO`WqGuhl89gncdi$lkIFAPipF5syj*08YEo#8V1q5L-Z2NQ2>m+xkMD8Z_x5oc=o zRegGr2cNWOX5Uvq!8de%9&r9y5?W^cpI$`0u6+oQ?o1N_hc?yhXh6DyT<_V@kZyc9 zz_-*@=Wcei2SX6BIfke@>W>D$Z7cy7@+%rGqK#RJ1c1|EGPK|b8i>%>10-9k(N>HG z(i)urB1d@siA96Re*c;3UrxaPhr7zeKv--y4|eMhlpLZX+oc!x<+K?`nWLkty*!PM zet=&&{>wt-M`{B2}FOwwn zgh`^EXSe)Z1=~y>3yP(q2t8~-PlM!r-hC7YK22! z3xftD420?xXye~00LV}Ef~8fDcB(z?Sg}vFBG`AeUl%5Ol#+(_%qp2W?hwe;lq~8x+cqPmbWXq+q)XH;zV4LSQ#H)+YQ;BaTZ= zFz4n@H@qb-LaQcTGQBrfi(;u8HCs2EHBap=U3iuk4cMUThW4m7rT&#T|ICdTlZnNv zs773c;jBP&-AcZO-1LR_mQj+SgUp$`vHqzYPL`8IO024_AoS%QV$zch5 zT|?isdCM02w2-wms;`N$QiS9g&xP@s^O=U%3IVcJSw&$E;YyaRh8-rK^FXbO^@c@iH=)faFJ*UqCL_c58HJe@2-sAl}Zn!s~iVHRjU9fsVy1S<&@tW z{sVR0Wp+B#JcpNqk7r=$ImB&mMwu|=z2rB{TDNa4h$$Sj?P@de^^UEcIc}?$c4Vwu z=n6^1Ddhp@N$L^Gt0P%x&X3MdW!J#njs^X4*mst3avm;cIgL76X+@QpTI4MDT#Rj- zRHu%8ds}^edx85muhXxT@|srFQCXe(%}mMf4JhtxL8#VZ>$(t6^Lzu^#5QfddJNq6 zn*hrXs0MWJ=!zs7+NSe6v48KV#J6%$Ei~V~V+Uc49c`$0ln#K;j~X_6$%lp|fT~+( zLM1KYAHlV&b04pSqfYU>(FQ&0A!@v^S)N^_ZEzvB`=MFjCA2m0d$-qZ@C}wJDlxo( z>8~4w47yssiM<1h5m4+@qRq@;jr#|vQ})aJNhiP0BqUKGjbkv9BI73 za`I_>mP4P(CV*1gL!6JG?T3=iKA;=JPnvO|ZsYJBfOlK|C_o=nGHh32ZP*!fF2`93 zaM-3}M(BgmLfF;8OE0#gu9^%F%!uxp5c;6_5Snx5*jIEz%()k4M0be=^?W%q!(!;T z?;kpcx{|wLMzVMQWI!EM!DFRJCc=&OJ_!x6!0szfXvERUm2?gb7>C2VorYmmxoOkAQi{a_lZ?V^tG^2?YpY# zwL$9*zV=q7lAhgOGi`n#Ory2_rMR8;Q!aTKiC(YSb_j#|!R0=6?Qu_Zk*h8OY(O$> zHFE7<>TD}HgphGK?=gdnZz}ASrK_aU3cv!_$Ku$1m&&;>Z-}=UiY;{7rMtn04oOX- zulvxU;mp^Q%6sGwHod!=T<2Q*{Pc9i0gYxKZv0n~j4vmmo}11ky$yQ2vD&ba@*o9x zEwj}&-!+|`F2V)FZ`=SA@X~Z9z(oW*_E%MAH7KwbP8Qg8taafVDuEi~AY%(L(u)vy z3BSe>>LIi|bl}95hkzOs*VlSCbs|GETOx81_fdKJ3nN~3RVgKQDAi6Az z5VlKQdhogaMm3kGz;5Y*kfl+bQZ~sh2W5+ow2lU!T$epLK@#XEP9@$tYT{kzSFP-7 zZeOpIqM6#k*+&{)ZzMJh2~qqOaFg;(>YriikAVpxret#hzUo-a2=*4(t++Y`7$G#- z0q>j3Xs}1>$DJDHg6=}sVBd9$Z%~m6@Nu=%4c?RZ&~sFw!tv`qlsH2S0*E3T>Lhy& zwTG-UqXd-)Ie>X${RZ2#^mC7|ZdH1HL%fvo&)$vo#hiFz^e{Sm(7EF*CMoL3#6DGy zYub53wq(N`xL1?mHqWutyom4|qA-ca;!G4x68NYtX1kOOm1Qg~ahE;5_oG>PU$~C( zBOMcO@dyJfaroO?RpiJx!a=Pb_!6dO8dXZp&84Jg)yr5ua3IL3i30bK^E3l-%J=pt z9Oh5?cs?3{mR6)LAlF{4H?Lh9=~17Ib)iN}l5kO56RWI?z1P~9N${fsC#!lqshqTl zJQL}`iM-yRmtxi`KrX)l(rYlxZ*u3!XwCD@i)?u^v6O6#-iE}z0RZh1#$MBvZfo;x zWG?t5SwmSk-1PBeRTCO|3D2naiEv5%?x^f?%VwCFmg z?aS_fifb=-d%1VQ;peWiR znepY7jjxr}+#ij#sJh9z7fp^(2iLsI*4SKz$^%%IIG zGTB1xt2e-e+7iPUa-l2rFyQCq7=G7TOUq@aOnV(;cgt~jMl3zgZOl!O^HLh?X2neF zXLd6*IRyc4j~!s>%p82u3R#1~8kWzuQH`OEMm)*CV3{`)c=*W3AWY#zZpQb^{4JAa zBMFg0!h$50;K0KoZ&GU40N8T?HOTL+62!p@1fzxh$4~UXjK%H57;WQc+U%yAB%Cf{ z{LA&Ye!k^iv(d|l5+?v)tk`x~@D_lhQ-g~~bw-wB96+iU*Y4$tBGMqWcqTkg$ zfgX$af#YJR7&?Y_8g>Y9ZF)V~=je(KZUjQ^XuA5fqb?YoU*%DrW+S=Dw9BZTX&b;M zp}kRIsJ88+8w~16b+;DkgYi)b{N=V=`2D}n7JhRm7zQ<+Ux<#Y4*j8&RH$UHjz;g? zDeD99AjIXWa~us?lx^NQXBeL)vj8m`JHE2s2?0l1>oO@;Dk_t#egjH2Jr)Qx6P8v9_~4*8a0 z(Gt*pt*{}vt+UROXpd!fKH#QG?vG?N$~isetvkNz#8bS2g$6zW#~|hdv`_V;ld)0_p=n@GYZ{)Z39*8&F@R)-P(rVH zu)Ov{>3plfFL0r%FcaGDNiFWrZc=}O2w4{*^fvT1IlssGbv##`B?AEy~9qsUWr{hWV!8glo=7k^vOyrG|hm5$!qNYa{OG?_bbeKzO3OTl&xY9|66^mZw3s!*O-GTD8ad?C}2u`-(6w$h0nTJ!HbE7yEA<=$?YQ&mBn?2zrX zs+)w(ewdtAz*jOIhHn*&atm5^hLd^Lz3o=@#kWsubQCQ)E#FN$~J@oFhAx3 zc5|`;sB?KAW?(b~@`51H0=(Z^K%_zlmAacS>Iu*+)|}a)l^i2#c{#DF@g-`EUdQ|K zkMrFX?Y`H<6^J8y!60~IQ4LSlLMZ*Z5DACODg zvTK#GcUq4&))kJmrJEE=j-bw9tNumP&~OtQ<}-`vacAXe@cq#%Y3TfbItX`UcfONF zeNGQ0g8z0LEkw-@Zg9Z^Sd$N+Tyo5{|NTWstm#K{nB16D@Rz$KlZ_Q7FT?s6>Ya<~6Cwil?2 zKF_juw6(YSA?oC8Ucltcvgy$@0C$wuAa6AKNMTXsJL$B^k_k61Z~lq!KPW`R5n0TDq>KQUS5eRt*Mek7TT zBsviLmJZU#iRdn=jn!H6YEIXuh<>MJeLlS!+zRF2F(Zfa5b`I^t?yAj#L)eaw|)xG z|MSLNj00@~=PRpi=vcYG)n_3qF0emXQ9*RLP6CoYOF%la0bOIg({_*CRGAcrT>78i zP(QtC>V0A?8>I2gSAoFzuuRDj0{%p5_N!Qb(QN$_Bzi7gBbT-Wkogryy>cBASj*+T;wF3!l|$9 z(pa~1I%}o?v62D#;Yh7~qK7MF5}rbIozS|WsQi5!MfFxY%RRnMZQ&?)}IXPQM7}FjL`;{c|m>*?sSzld8 zcq1SKKFnwR8;dO1c=k2cAc@h;cP1?EIa|J-@e#6EgIrUtT4HXbzU}+NQVyo$0B{oK z&J$)J-}lD4;oY$h*iWd!C&3eEC^Ky*h(tzxkN|Olhq?Z8`uXV_mrwgYc(gW7-L{zHo@YsPZq0IBl)wI0)QfJ!LhqhEx&2cW<-9p=(l^4Q_Sj0p?s860+t}T zJd@>hNnhTewXH4~J*km)s`0rvp^*1aY4ouB8Zfgg4>IjgPhq?|SVx(2Z2qW@;K_N2 zVNX3bLXRE^5XZId{C);?!F3P9jW50)XG6W36b4R2J;WcCSucA7Jhad*%Qo~UI0j-s z!rilssJn6K0r>Q5rwUPtj;*7Rc}YF+rx{v+$n)_OLIs@f5J$bLdD1VIz-Ap}hG>GM zeQ4-se=)2K&|mvUGUksYa?MW3E1%0y=Wnxl(;&;MA4guIJ4!xqg~xxQi#D$U!H>Bc zVDT9B#z`=T@cTGaH+j|%7JVnzv(xB)5_VI2e+jB@Zrlo+dBW|Fcj(UfGPvJMOXz^$ z0Gz(4|4j6M&W`%MV16kY zq@=>gpJBJa*L@%z$0H%BY%YirhFg+#3<)h-BBo_`5LSImwB#J>liJ9Rzi9jgu2J;rTU-l?=l9xOil?B2_x?7 zSCk&6p`dqJ=;rn~pOq2YCRF#iwTA^^0X!jf)vDcMh3V#A8&(x>W|HhWvob%%0`S5I ziM5e9d>HaFh(;xtK`1}Ih%Ob<4Tyvo@;BEPL8J2+z}}nO26V&Pqp_K34}lCR@o>#Q z#@E+qZN^Et75mjHQuMNFPtq)wAFyNdk08Rl>vzonRCz1Pb1$OPwbEPJ*hcFe6Sge@ zN_=|#*-s>~1SmH3e&J%T@5bh*0|!y9TeiQFvfZeVz_r$%I;}$GfZc-1SEHpI%>tYi zP(8&f{rK1Xge)#>>-SXsw0t8dCioCXT`ul&B2^AW;kXc>aQfTFwFPo@YF>~2Wl{U= zZz}lcxKa(-iR{CWtzl$4YZGMdgYH(fwiX0($$KnxNs0l_LUa{u?QKfb2u4IM4Y5ph z@hoHV1yZQv;zOe2n^Dvi?BnOzK$lQo<#VDQS~taAt2oU4#s2O>Yt$7v`x5N^7p@m0 zX!d?;9mI(xrE#T&Cs8Qq_%Gl`t}c{aiA2E#ev5f`G#A&_R=efVW^fgW@-nwu6`+l} zs1yQ3DwRT=M0+@FM8WZe$)9OLqs4!$3Gy_1`zrdnYM=ziN@0k~VchSf5ZaiiIKSAy z{I&Nt5+y)-jJ6(1P^tw_MB7Jq{rBWE`dd&jTKqcr!IdbsP?S~Kw3!L&k0hS9qI>+L zQrL|3cPhtFR{M@pIV|`8MhF3@rS$ziv=!rNJOfKsZo_m1WliY(R)E4E!`WUyKOa|s z!vBA9sw1~p9g+Nb@5Wkhj-AGfGe>6LqG8)c{mt?QV=ipIk{XI@&IptB%U&XuQrGMO z^R0@9`y3%GLbA+kiheF>4#1jKy|j*H1>Ynr?=zol5>5qCV0?_&I2w3~XN9vG<7SKK zwfh@<*YV>Zd2_5e5>Nq|HS@lTM~-AnUL~ZL_n9o$>f9=4k{qviI6t=XUc;MDVfv9q zGfwF!>adS*E3jXFAndzLLW+qZrkoK~9g_BE#}!>uj+S$GLMksZK=@aM_(de!InfS< zNVmW(JpqZfP;QUMSUc$2K^nev(c;lvMiV@|BE!5Nd`NOk7&|4-*JnJxKPUqsf7?pe z=U*szdrT||=5<})+#OxbW|y+BcWu)3SLpoHLLrZY`9i&uj>U_VlE^=Bkn6a>6efqfDU1Q!(vk;ZJQT<#VS zSiZZTi@8UJ(f~4&nUDAg6vLW52RNb7bGTf{s#lq8thD8Wx=>9sDq){!w%p+J8<*+4 zz*nk7@F!h9I3Vqw`b4N8>G_#o`u1I2zO+1Fl5&DK$W4UL+0v5`+3M+>#&na?8uu<> zPcnehkN7A>615;nkC$$&ALl653<&C52?KdF#W-wzy(Q+A9=P^1+nMiHbMwQGqNd&o%M z;O?lLA|>S0L?pzlOTimU!8K(PTjoAoeRcLUELY~zT%sZ;k`3SKRk~Cu9N{SoMIVT! z=D2CSv>lptZq|uci!`ZeNri*xNbG04jVl;=m$~b#t3`YV@Dfh;IW5{xOx9;29f8=0 z)Jn6Y^ln%@y8r3k_G;ip^zJq>p2ss|a{(A-rJShKD(Mid_$mT?h_;XKgq_I~MolCq zzQ0`o_#;HpUxD+PjS{t@Pwx=D;tfEtb^-LF%)tsPHhOEXlAq$YQQ>H52YIj0#tFBP zJc^{PayM8gFHy#N=5&~wx-+$>_&%{kp2F8__$A70e7nMw zAIF;;6DJjyFA;k|pPCZwx-ybjJ>HQ;T0oK-nY>GJ8_RJdDkwN}Qrzl2)kyZl^D;Wi zRK?a%_bOV*8n3X~NTwM>>&sx2L3p1|BkO!=s2_4e zBn+3o0cevq2FThu-DTtHL!XB61tP6;8kCboa}8QK#JdZ?LIrQfOKxay#n>RB&MX%4D;A@cVA$Ce;Oe9z0=ZtE@)Cb3-JVs6(k|`#8k;bT5`ZdsZ!K_6A}<^gJ7rHsaBld1I=wv-TfW%l z*pn47c@zc3Eu9|*iF$lI_rBQr`uKv8{iQID&-oxpF7@5ecZj0o6=VHh6WOH5km}Jp zUvFE~6=}KCY0$wFGbvraCObA_71L{IRM>o7EnGTJvUPQVQhf9EeAn8HE`1?JnLHj= zN^U)j_3Y`I{c1kj*|xwzMmx*`FO-_@7hrJ0_nHN`L&P1D!{0W@&0Zl3#dOx+asE-} zH&|(^wfumCM<;t|SGPSRFPwMcv&PFdXucciMa=?Rx(ubGk_ofhZX+qTRf_Mr^+;R- zo9F-}-jqqy)h3ss&idUTHEDJlw2O#O8hU>Gg)FdUJys0r!Z%Q`%C`6pxM z2Ca0X@Q^0u2_mH$xD7RqBwHoD6h7<;LX=wKjdxd0Z?a6>Zj1j6 zqT7AMl{|g-sCj#&Tu(oE-%*tc#K2wG{sDq^A%evsm{ri3FygY-C&3^aF(_n7U`vz) zO6+fRWn_7Yrjn`C^t#@GlRE?cO`V9 zf}mJ2NPeMx=5B@nzOiE=LD>7Wy4276HB%Bg$%v^E!FJ_$oEj1?1Lr%# zo53fwHlOZmG^T?Y810r*G_i@;0^O&d|kBK?(uMMlPt88|tls z$hwq+hLl?wzlk6ant1I-V?o4~^NN@dhMMCPIP{k^nEYb67?05l3BqXe1L@*&%FwQ+ zFJUJmUlnjFjL6FjJ?=D2jT+oJgk9{yYwYw9+tCeNGwDMYUwhqNS7XY+VTk|ujx&8= zc~mElwf3==T7|OE3y>j|!Rx;di{kf=gt{~7dXl%av41;0FT18+FX$YqJfeSdOdWNI z%l&V)O~@{c&srKTKg;&W1^qTufxGj2~zi0Mh>#psPNu26reDR zG?4-Q>L-AD3|Pt)RG=*21cTx|>3Rn^x6w`VEZelbLYfjSR_%@OhgHGciq$0^Yx$u6?gxYEjG+2KF`&irA$d3^zRJsK zJ@oaZ`Dh?nSrA;b zL)sDPPLQMUZ*D`MLy@czJbP||0BtiCF*bZr6&^hRV|#@pRs zNTdZsM-C3(5QAhWkEelhyOX*gLC<)2FOug&ItL_>m~{;IZBRB=p^R0|Nkx;?61hsb8gCJ&g znuc&RVnPwhwvXGyNIBk`a8=b_SBEGE(L5uSvSc+G1GF^_;jsCDd|0XY z1>AN?l9BoZ1_BjyTu^3wb3top>ms>o7P@ER9JcxPYRLH>GPSy$MLsyLB)fb z%^H-RHNRW^MM%tq20w49Ao>FE{Z&x6Urk^iNT|$Hx#Rw>DdFzt&$9Lyh1yX!pN3gJ%-1lFi-{(2-5m$C~iDZ9Ef^=^aO_jgWdFY5HO5lt48HO@8SfGd9vtmRAtDDPvTPREpwr3DcyWxU;JxoDZ)IIc&vxk;5wyJe*?UiInq{?) zzBcx(t=6MNFX#vjx>YEi%5k9NZ4?i+LM(%%_tl6GfaiT~2SxB|q2~3;g78DAunT&9 z-IVcWCc#ooBd_7c*BM|^s-Xf!Yl1J?F{^bF;eHkXBbz%e4@R~HSwDI}5-Joxnxa>T_2tP63lw*%cpl^JSr6A< zZ&%`#w2C@YVsYj^BsxAV8JgpgmGA(KK%w(<-zo4cyukhE+G4LF7CO6hazsGtyB%(W zNHzrKEoKKzp?1W6!p%Pq_!@lFq55s?%Ur&x$tJ(Z0SanYDGF z*s@3N45DqkZl2G_B$8gTfJUJKdp*3c=#hyp`7}=D0-3zN1)rYsA~b2h<()kzfAU$| z7fn}VAlHneC>)(+#dMLO9AVNK3u*t{d2dRK@ZumtD|B4xz}Ed(sLzT+fs>$8uG#i> zBIjc6^}OPpKrDF2n%R1;u~_+f`eB1QjEiBdU7fjzyYk+qg3acf_`r>3{HZtmE?&Q} z=xsZOUV5SF3P7g&5)(Q+tU^>z)^--C$g0^0(yp%8x1a*rct^lpRUK^Tx$eusxolspN^g)d@gi^_)cq?+hZHD2?5g>c(-p--ID&)qjAj`q8RINR(iC*J{kqNvO-$QwS_v`5f3~*;J48 z2tm5H9F}n&=5T#+1fxohTc1n()l~}2Ep_20Kfve<8v_ zk4UEXKZ#0&DeMf}GzpsJGa7FZu{M|Y+_#yy5o?cFZ!s-yIX4GHNaYAs*p*0^FsRix z-$_t?diYwEJAkvJI-4jNjGkh1sdxKqzk;Qb<$~TUx@f)ZU-1Rnn?wcS(8Y+I zNc|HLE3U%j1@)37=ttA@2(;MJ62K%N#c6WuOZ}k~3{)jqJ~h1L1q)Sy6z)S={M({w zBzsw90G*Q5;zl*Z^8kOIK5^y6UIY&VyK&MfP0JJLcoG5XB3FtC^V{QP8nkh(%Y}@|sA99LKziDQozw`z z+yFj-UqVeF;{wv5!7>hwK^Ya)+*W|m>C@(SnbikvS$)K7oKJ!NM{>6CWm4JM zEuD<}0WyC{fd<~JR zCQacdCA?SWKy!HVa(nb^i}m`D99!1=R_(wL`AUJvKDYw$x1XEkdVsv&@22e?2WSu> z!ukdyO@s=qzP{K;#2L4xPD(2OESf}we~^6kl>@?mu&YSD-W&wzd|dA7T68g-NF#*( zx2W*{L2fhu))wzP*OaW;I!Dp7^>p4yV+qEWWfv`zH}{OX7E?0M^bnKH5ZOR6J$gDmzv8yE_4LL?a7sJjGdR*zhcL=8&C*n%C1xRrU{wO`aFx4?7NeEZ9O_%jFv{K0YMnSpSy@(M*X!xzbl55Q zFSHfFTrUd6Q9K}lIcam3Ei-m^EN#Zs>h|)NiQFUD7RmCSv}T~Fqdu9^-@zzirZfLM z*CM*3jya8ZKBqV$`46$OuOFopS*3=2XX5z(NRAlX)fr?kfunUVRNAq|TM+{opNqBE zjZtiyM%h@~UB+5d$J5Ub!9IlBN66P`RcIweCEwr9#MZoU9d8dzHdoE}Js7HF`Ucb& zKaW4VrJqqhIl_|N={P<@CP|yVv@N6lt0YsCX!-bu!BwZ-7)ofeFF7}Q<1v4lE;(GA zI%qOxkD{+r+P>`r%NxQ+8b`O&1DuX6o^qewdD3w7NApzZZalnG2|!4$LY9z+Sj^xBH!AS@nXA+0;`X9!YgsRnrcZjJ%8L1MNc^XKZgqP`#v@>Q~Mx?b2lFR-q+D_S@lc zA9}m0*HCbQrm&ykqbST|cs?Ne4|C^pWb#H0Qhx}ZbPZKBTDf?8UZOTcO1b$%6*ef2 z--^ud+SoBhx!j4QES^i+6yD025EngGr&YviHMFaR(Hn1)Hdz;5q1XAkI08ysiG32J z(-tKC5^43;nYxIdn24w(ePe6LMe)Zmnj-m@%=6MZk_}W{RZ0}U!|W?P^L!6!1Nyex z26Y*))aGN_pfFM=AH(^RNX;6hqGUD7KJTzFjmp7i4Z8S$FhIHehWdL?e$29b3>^t0nN$&A=Et-_AEnM-DWn?=i#0RPgp4{2U@x$zaj z3h`*{CzQ#IN@BY8;pH8o&BaJcRb)uN+TGq_gHav_^l~Pj1XbANOoU+G#zJ0cWjZ)F zCq?OCubpJ@eC*H#5w9oj1+_P-CH8_;S(EGta>q>N?Fp!x@e0_(Z9EhK%{gjlwJeo& z>4S2!J_wVs-q4$KtG<7s7SX>xsQA>1 zE7G+$dgJOwZ#vQ|_d$URInq_IS&2zTdP}vJyN=e0_OKF2R7;5+q8{E>E;DFuYk(%$~_lU4V9WV zoj<{|X`h8f7~Pvpju($&kC>VAtgu!%92@7Y;eE38?1deVG7oGWEo=}>ZgMW*ixQ1_w2t6?5_Z?(?BT! z>)BBH4UNieyagf7p{O%?YADhdB~PIH$)4+hv1qZ~AyDe%w%;cj{hJR>BKOSV=Fp;} zY^3_7^2FB(w5Y4G2S&6I>-!c}QdJ4Wv!H|-7FANUfV7HRTxCa9R0$%As*IiZLevrE zm4&PyUI(V)8+Rf>9c@NCvhSBwJUT#|P@o-eo@ij7l-zj|#fn2r!LUQu=k>M|Uj)&n zrxXvlj8ru@G;tR4R;U&>eb$ApXdZ=?DY&nLK02gT%762r*+0g(H1Yb z2oyaepxb!JT>OvU2ItqtFlUfNTOnmvCjwP=R8-fnwUz8c@`#b7P5S~**Y8?N>yGk% zQT2QOYC?%aR(}bYYD9#~fwT-^)CF>;`d1^3^?|s29LRA7=Vw-d zalM2{SOyP^Dj{8E8MzhYgo>sFWM6I2!BgcC-z zV(5Angv41sD@}1#&=}zm`~#Ch9C{@JjmLs!n|q;^iTohhwRp^E8Z=4bNSD?N3k|f} z5s`QKO@p#2YwjyFgLPCv%4$TQiPqAv zs-iwr3AK$!N&KpXL=-Z&ka8b@(#c)D!-bKu_#k!p`DW;gpwi(Rc2(ju%{foLTETaH zwcYd{Q>{5tNHs&tLOQwfPCy^?KnF7|kRtDKN*MOxJoQ7bI#|P>3DKnOG!@r40y%D!^6FTtio_^WjbwUB@ zMC&(;1kFpd-i_Eo63;9M*wj)$$TCP-Q8c0rE-=n#;{2cYE>%hL-YbK;q@o_nM{Usk zOGF*cPCKr2?G^wh-01hOZ#tF=jOUORcv}Xdt5<{Rpk1oF`yV}O{;%dEHd%DX`>a1; zV5x#O$|Ex&j1KrB>1w1ziQVL7LFjo|%Ze3TVu8W8o4_&YJ!m^r%ZQStq1- zNE-NOAg%3ql@~xemebWbT!^UIBGe2mYJ8xm*ID57cN@>3x5k3e;pME)+Z3&L#BB1; zwZeDRSRg@NsVi&O;yd1=qL046g9?3PQzhl@6#qI?I}qat@H=EZliZTxVd@S#p9tnO zy%t1F7RelYI$Enh&-%euL3OB0f&ioVxX0&%@_bm44N z%482T9pVkHqndKjAg%B`;Oxqz<&M}Y)^#f_9Q{HE8>XRlcBOpGskpyLUE9~1M8!@v zkn;Ln_0UpAA~Q1=Pg1Og(6*Or`Q#L+ z7t=|6Erts`krFi#B<_Lh^sLx!=mBL}6GfgqXU`f9eOdU_D6Ftsg3a+UhkpdE*>fk&h=PP;ZK@ji5Z0GlkIWTF*QMF z`&CL*%1xwMqpI$UsHniaj*@Y5*!1A{!}C96XclAk+T`zRrL11An3z1l3E5}fV{Nq` z22!?8-X{6Xmvo%mGQLt?#pb=}r1xl58U$pu30w=HS$EP4Q6Y={*nM;%SzpTqbzKwHt^b%|?D&dW$Pk!?E3nXw9;+P6+)FG{ z&YG4WM^eVVEX{DRI#V)Yl)sP1ZNk5r%N-=Ld#ieQ)~l?E3e-6ibhrvvN9LNW_OXzt z#%XvjNWO*l+h-RWr$+sBO`}DJ56(aS0SyU3ixO>yT@Scd)G*ib`(xH=VCpD6Mki%) zCt{PT83t#5d zW;bDs3^anrI@1dqi0ZaN`$7b{H%Dk?*MTZ31~1=gc>Z;wAooH9r9PsqHi6yAz*TTd zIioMEVDD~{RX-+IxS=;}+H&euTZ%A$NJ|bPrgisR{*h^TFQ02%0Wvh*-7e*rx{{+z zvhxnALa)zQ*GJC`ulfusx6Hh@t}F2*=1wEb%*;=F=}6)QRiWZW8_!s|NY$F{87;}F zS>NSKBlWrsa3s-c)~ysL2EB(sYC#_7L9Je-f8k06b-t8*pp5#{Gq#6WR$8RF zzOpO!88hhpK%I1(7;)s}d{y+tK``=ejizwqL&RHFe?!_tEtlnb@#ysER!Z~AR z9jM>tvpkjUb*Bqy0!`maT$qA%6FJF~D9^n*kMtX3yd$QB9mqWU#HxSHYYU>PB?UBF zmPJh>T2WFrtI`l#p*xlMr%Jt=F^h${+Lk66##}_xg=NyET{UCC+U)k}|`V_v2f>ouq66t#LAn6l; zTD}w7t}9Yrz_(CnuM5oo!0xt@=$TxYckv1w64|n5h|kYU{pR{-9)%Rpa5YY$n6b7= zywp0zAd70OeUBoO$I9r64a{{_c-KL*eA#a}`R3b7U0s^l?};U)v7Hw59ZB@1M9n&U-T3;96wlK2S+z>B3^k+V!UYPZ2PJs35eG$;=vQ6sprOuW zc?{C#cJ+36Zc4vhxMK@dtnEbW?^a<)c0t*$R0X<4lwcaZu*L=HD%51p{=4af2vATM zBB!_+V%|FM$k6Jqwfa`?I%oM|KeeCxeNNbSMMbYjYB^cd~W48ED~B;|#<+ z5pn0Y{FbeNqZp4=u}+*NSD_U_DUp!QOFp}pPy*ZkO!P0y`JWv{h>iaoT?8oo=NU!J z+W$FY#5jW83hlARuvwUYm`MHerl1HDSyxhx!c$JdL_wklU-c(2VsCMj3D&@lpFF(fiv}fzhp!Soq!B!*5I* zK~J&0`+5Em)H|OA4o)IB16|{FPhBZVcKBTd6H2}g%y|ZQiHtz`e=N^Gxr@WjFs5^o z$5FpIVbkV7P*enB#?k6Z?v%v?Q@Oj~w4*ZWooxibt=XHS_dlhN0bO$A)kmmbFmXr8 z99)+R4AM#x$1IhnT8=1y$ zbLo`3_0?mGw^rNVA%$Dkjyb!eLP$MTK~|Xyf_B0cNIma{Ua?5Fo*gR*9pBMX%Bzyy2N5`J2(>vGh#V7XEfapZ*Jme|rnlwqg_@1j%|~?}wPVAM z3yay#Kdfstaq{%V=p`g6=X*TsjiZs;-2X;Hrk-lVjqSMt6^ls6{uk1CtC5*T9 zZ@m{0Ym@H)bX_DTxKJoCveq9X|I zs-QDj&rdnv(4>Z5nBM}r?g>(PCseZ3_X56ehv*CXfyvP6=FylvSy(~b!UF7h-CXOw_O@CSR(WuCvY29ksw~w-pn{fSE>3LLP ze*Iy&g8n1Mr|Ctf`=XPRMQ~;nX$Gp%^Octw`F-r-=8G?{wx!s9D{Y-s^Sr>Z5_8$n5el^dVeUCd@ z@<)d{6*m5kw&voLN^g#)Wq-dc0vUTzn+cCGq)3W*`vJ4|Lr7Ft0z-5lZex{V-c#fr zdd{I32oKu~Smo-6`;PV@ortz`dwnz%eO=;Sl2LK#YR9W%*G;hdQ8yFX91P(UC&Ls`6>26i@)$-QKxgF;=}3dn zDxUv!`n`h}`B+TmP}R^XpQ-L0)+p{T=VXfq;do0q8I?4Z$Q}}-!6<25E>TM`dq&^+ z7bFhbt`jk0$Uf5ED=3!v(NDE`@b4b2sprMkzO8oYxva=rxqEJEA#{G2L%64R zeV-^bR`c;phKcaQ>qo-OId|rb1Q8k)qD}Uvf6T;-1vK`Muo`tK^0IId=lC?CYxjX1 zn63~*ysFy>wRj=aP9$vz_i<)T2XYmv^)vL8Sz~JAE2{1$vRjQ3j-Dz$fFF#M12oX1OS0p zAO5cUuPt(5`V5JGov2-QGn6R7jEdH~ zX*C9{{G6PG8WBw*qi4Qb)bf?oOYG~A?!Uh>&X)9)+gn=EHfO{>5)`kVrPpqE5awg- zD>3z}F4$T$t4}nfKPF37U!Gu9=U; ziV0dI_0HDCrTvK=OksSWay3=jjkG`HOuL@+o$!7ll z;v-dcIUd(fF!_`Q`FZz^FztvBu6QwHZ<8%01zS+-o7v9g!0W~0QpP0Ki0B(eJ!==s zgb#=k6|#`0d_%7r$H!+5T&K4Q^xmawq)z$r&5#EGmI28MvmltDtt$rkfma8oLWL8D zsq~&2k`^{&@LbK@bdnTJ8ATujF;Ok&)}DHKJK~mqy2ZYT(}tV!EB&AUGl4m-B}aI> z5;}g&vsQ06!uK|c06vD5)Dn*d{H0USHHX~4$ z+W>>sxWo!p%daS%5MpiC&QJsq}83 zFa`iqkx4oS^1>m!g7D-E7TY0G2B9NCC5#kV$#~F8i>eJ8_QY%%PX=T85lLj)4`6gK^Rf5KNK?7EC4REzn z&5vzj&ixHy4%owoAo^JrB;h$3zIwxpULS+@-}Zfic_53CZO;6ya8z6qKoi!^LD z?|zeOpr75@t|PKWSOq`XtL_$dt0m!r;X`R6os<=%h9TK}U1t3)tgcy zxnx)4uyjZJIO`gOSG#!Y+6mp-_*YxcN%|?4p?T4iv+~UN4Um&!+LSRwY(eQ<6w55= z3RyYU-ROm$15U?-m|rk0jzL2X`JUvxg)2>2G~mI|HFPDB0!eeGVQmQbc6k3c{-?h8ZoO>BJO<8xE9ha4Fb7x8Kn zD~5&?74tfR(OYhE^2Do3DEu?(9XrIQ7|x(cURYe&=E}v?YdW8^Y}-}UJx$}!)eiQD z;aiJHmOylT1@jf9{9b0Cdy9Rx7J}(&gi-U(*1zy*))Y&qHAH-{kD<< zGG`pSJ7mp{-KPhjs3r4jw74#^YT-&JlY3?zG&xz_v-DumlHz%=R#!l!Un*Gtyp2Gq zQQRnNsVb~WtJme$TA8oIsq_p7&yHoCmoR9o5$px>Jez148BcAq4`!`wR B)&2kg literal 0 HcmV?d00001 diff --git a/docs/self-managed/identity/orchestration-identity/user-guide/authorization.md b/docs/self-managed/identity/orchestration-identity/user-guide/authorization.md index 9e9e447ef61..254dce5d935 100644 --- a/docs/self-managed/identity/orchestration-identity/user-guide/authorization.md +++ b/docs/self-managed/identity/orchestration-identity/user-guide/authorization.md @@ -4,7 +4,7 @@ title: Authorization description: "Learn how to manage authorizations in your Orchestration cluster." --- -Identity provides unified, cluster-level identity management and authorizations. Authorizations are managed through permissions that can be assigned to users, group, role and mapping. +Identity provides unified, cluster-level identity management and authorizations. Authorizations are managed through permissions that can be assigned to [users](user.md), group, role and mapping. ## Authorization overview diff --git a/docs/self-managed/identity/orchestration-identity/user-guide/user.md b/docs/self-managed/identity/orchestration-identity/user-guide/user.md new file mode 100644 index 00000000000..ec963a1d7ef --- /dev/null +++ b/docs/self-managed/identity/orchestration-identity/user-guide/user.md @@ -0,0 +1,54 @@ +--- +id: user +title: User Management +description: "Learn how to manage users in your Orchestration cluster." +--- + +Identity provides unified, cluster-level identity management and authorizations. User management is a key part of identity management, and allows you to create, update, and delete users in your Orchestration cluster. + +## User management overview + +User management is the process of creating, updating, and deleting users in your Orchestration cluster. Users can be assigned roles and permissions to access applications and perform actions on resources. + +### Create a user + +1. Log in to the Camunda 8 web application. +2. Click on the `Users` tab. +3. Click on the `Create user` button. +4. Enter the user details: + - **Username**: The username for the user. + - **Name**: The name of the user. + - **Email**: The email address of the user. + - **Password**: The password for the user. +5. Click on the `Create user` button. +6. The user is created and can now log in to the Camunda 8 web application. + +![identity-create-user-tab](../img/create-user-tab.png) + +### Update a user + +1. Log in to the Camunda 8 web application. +2. Click on the `Users` tab. +3. Select the user you want to update. +4. Click on the `Edit` button next to the user. +5. Update the user details: + - **Name**: The name of the user. + - **Email**: The email address of the user. + - **Password**: The password for the user. +6. Click on the `Save` button. +7. The user details are updated. + +![identity-update-user-tab](../img/update-user-tab.png) + +### Delete a user + +1. Log in to the Camunda 8 web application. +2. Click on the `Users` tab. +3. Select the user you want to delete. +4. Click on the `Delete` button next to the user. +5. Confirm the deletion by clicking on the `Delete` button in the confirmation dialog. +6. The user is deleted and can no longer log in to the Camunda 8 web application. + +### Assign authorizations to a user + +Please refer to the [Authorization](./authorization.md) section to learn how to assign permissions to users. diff --git a/sidebars.js b/sidebars.js index 798f75d50d7..e552abf763b 100644 --- a/sidebars.js +++ b/sidebars.js @@ -1405,6 +1405,7 @@ module.exports = { { "User guide": [ "self-managed/identity/orchestration-identity/user-guide/authorization", + "self-managed/identity/orchestration-identity/user-guide/user", ], }, ], From 0dd35f949feae13d91440d8361d9999302efc3c3 Mon Sep 17 00:00:00 2001 From: Cole Garbo Date: Tue, 18 Mar 2025 16:39:20 -0400 Subject: [PATCH 3/9] poc identity in component docs --- docs/components/identity/authorization.md | 51 +++++++++++++++ .../identity/identity-introduction.md | 9 +++ .../identity/img/create-authorization-tab.png | Bin 0 -> 46630 bytes .../identity/img/create-user-tab.png | Bin 0 -> 30281 bytes .../identity/img/update-user-tab.png | Bin 0 -> 33794 bytes docs/components/identity/user.md | 58 ++++++++++++++++++ .../orchestration-identity/authorization.md | 51 +++++++++++++++ .../identity-introduction.md | 11 ++++ .../identity/orchestration-identity/user.md | 58 ++++++++++++++++++ sidebars.js | 15 +++++ 10 files changed, 253 insertions(+) create mode 100644 docs/components/identity/authorization.md create mode 100644 docs/components/identity/identity-introduction.md create mode 100644 docs/components/identity/img/create-authorization-tab.png create mode 100644 docs/components/identity/img/create-user-tab.png create mode 100644 docs/components/identity/img/update-user-tab.png create mode 100644 docs/components/identity/user.md create mode 100644 docs/self-managed/identity/orchestration-identity/authorization.md create mode 100644 docs/self-managed/identity/orchestration-identity/identity-introduction.md create mode 100644 docs/self-managed/identity/orchestration-identity/user.md diff --git a/docs/components/identity/authorization.md b/docs/components/identity/authorization.md new file mode 100644 index 00000000000..cd66a5cf24e --- /dev/null +++ b/docs/components/identity/authorization.md @@ -0,0 +1,51 @@ +--- +id: authorization +title: Authorization +description: "Learn how to manage authorizations in your Orchestration cluster." +--- + +Identity provides unified, cluster-level identity management and authorizations. Authorizations are managed through permissions that can be assigned to [users](user.md), group, role and mapping. + +## Authorization overview + +Authorization is a mechanism that controls access to resources and actions based on permissions assigned to an entity. + +Camunda 8 cluster uses resource-based authorization control, which means that permissions are granted to entities (like users) to perform specific actions on specified resources. For example, permissions can be set for actions such as reading, updating, creating, or deleting resources like process instances. + +Authorizations can be enabled or disabled for each Camunda 8 cluster via [configuration settings](/self-managed/identity/orchestration-identity/installation.md#enable-api-authentication-and-authorizations). By default, authorizations are disabled. When they are enabled, a user is not granted access to anything by default and must be explicitly granted permission to access applications or perform actions on resources. + +## Authorization concepts + +### Permissions + +Permissions are the building blocks of authorizations. They define the actions that can be performed on resources. Permissions are granted to entities (like users) to perform specific actions on specified resources. + +Permissions are defined by a combination of a resource type, resource ID, and action. For example, a permission might grant a user the ability to read a specific process instance. + +### Resources + +Resources are the objects on which actions can be performed. Resources can be entities like process instances, tasks, or users. Resources are identified by a resource ID and type. + +## Create an authorization + +1. Log in to the Camunda 8 web application. +2. Click on the `Authorizations` tab. +3. Select the resource type on the left side of the screen. +4. Click on the `Create authorization` button, this will create an authorization for the previously selected resource type. +5. Select the owner type (user, group, role, or mapping) to which you want to assign permissions. +6. Add the owner ID to which you want to assign permissions. +7. Add the resource ID. +8. Select the permissions you want to permit. +9. Click on the `Create authorization` button. +10. The authorization is created and the user, group, role, or mapping is granted the permission to perform the action on the specified resource. + +![identity-create-authorization-tab](./img/create-authorization-tab.png) + +## Delete an authorization + +1. Log in to the Camunda 8 web application. +2. Click on the `Authorizations` tab. +3. Select the resource type of the authorization you want to delete. +4. Click on the `Delete` button next to the authorization you want to delete. +5. Confirm the deletion by clicking on the `Delete` button in the confirmation dialog. +6. The authorization is deleted and the user, group, role, or mapping no longer has permission to perform the action on the specified resource. diff --git a/docs/components/identity/identity-introduction.md b/docs/components/identity/identity-introduction.md new file mode 100644 index 00000000000..65457875d2c --- /dev/null +++ b/docs/components/identity/identity-introduction.md @@ -0,0 +1,9 @@ +--- +id: identity-introduction +title: Introduction +description: "Identity provides unified identity management and authorizations in the Camunda 8 stack." +--- + +Identity is responsible for managing authentication and authorization within Camunda 8. + +For documentation on deploying Identity as part of Camunda 8 Self-Managed, refer to the [configuration guides](/self-managed/identity/what-is-identity.md). diff --git a/docs/components/identity/img/create-authorization-tab.png b/docs/components/identity/img/create-authorization-tab.png new file mode 100644 index 0000000000000000000000000000000000000000..5b6aca18781259e0a65e14a85493348889e581f5 GIT binary patch literal 46630 zcmeFaXH-+!_XdoJ%GeM=K}0}M6cmu&o6>s+sT!n&DxFY8MuE^odPhp=AicK{L_vB} zx}iyj&AeRg^Fv$sA9a^h!BlAXlC!8s!-A)&qG^qZ5f zyk9&&el-2+EoDzN*L!~)V`4}vp6cskZJ!FC@-_B(-v3O~2IGVT&364 z!hVKf%Js6lXa1US;Tm)J07hkqVKeRGUs;U%RP2{iCk=bID$BOT_a;l0;HM4dS%utP?j!7JW8ML6Ea{4&S zI3XR?U+a$1)V(K*S2dbMvn;b)kw|CKp>M$4^XvL9b4A}b&=d4t9ExI&r&?3kczFDe z`qAsE=kAi~zhIWWv|B@zv+(YnhyE2>wFH_ozUwsOj~^uvHa>Xr5YG)wh1)$wJv(x# zw@RBZ!tn(8v-0r4qjJR_!xiOIyf{21PsVQLM9s+OE4`1@JA2G@E&w+>uy~gTr_}z5 zR9$hi=s*s6=dSbU;3l5<(xZ*u^Eoj<Ql7_OfIP~B(KF$#@I1V0obp-q&1AlOE zj=p@3a{~PTJoqD$fcxXqrvfrl|+^P?* zqG78cE5oC2Y0miYktNK4(b4=d^c5UFM;`Ff+`#rBm7}?tg$<7*KlRruc))AuZ6<1} zub0@G@>6TbDp1|Cv^JpPV7$Y4hg#qy6%`eq^&>+bB@wajUk88Vr#7~=eayqeG*B%+1ZsbccnBg@plJ!C-^1uzl#rU|~b^?Iu6&BVu5qZw-HJ3%9hOg6{he zW@%^3PfZQ|(9i$At<%5}{_B@4Y`#Ahct9rT6DDTHJ4`?C4Zg|;z00EjcQi1&F9J6Q z;sL)Qz|O_S_x1XJeDdoTfBUA!uWvGQuyg$W)!#lk_*GRK1M7R1=HNGN1%7SK_b>nc z;rB1{F+q?1n<&1?`Rltt&;lpql^u&6mAmtg;9$lgD;+h=lv!A*f>FgP6S*Q%^?(j zMw!!$*b|&1xOn*IsDyrd;bB1%kvw3U@Q)9EyVU&rxluS#c<>*8|LSj73^BDAr2X~c z>OExcnYB*|Ef#44y&8wyQh^D#k;2)`0!hfX)|u2V{M%xFyCWVxo8J>0`8T#j&(HsD z!M|OzMom?#%*3C5<={j8xJKv=KK>G$jJoN~AMYHL09XtzSVr)F%YbC~|0ikG63{;$ zv}#P*gwwf>EQeu=3~O-YO+#Yt9j1@xjKxMj>Ia&0yd$cMRJYoH!Qixg%+v2mQ%vgoz}gmrihvYk`u<-8$R@PS3z zK`p7LZ*QSuv9q8}Ao{3*vOK?CuuGfZzDw{tC2TC#VOWxL#Kk7c1@pdwt(MjBL&WOa z%a+MolhI6TGd-Ezg_JYfDW|sY9wI!=b7`kBwswziWOQ6NT_SfJ^?=vxu1oJ?H{`v@ zttEJt>xsIaU$%&#K#T_!_NZy45D0809D7P>vC+!A7_&F!zBlDn@!&)*F^!sQ^Zn7hX7%ZV8eA{jOI7h1e zlA2ux^ZfU;)8oPNjQ-^xoo2JUz@vw{VS?k6uQ&`c>)7?Eri%ws3{9S+ftk>$>bugs z>+FHU=J&4VjP%Sa3;erb>8=*qisJ2vf|VD;9?7d0zV158cO%wTN!N5r-hEq{u2fmY zr9DA-x?5RZwxESWi>`D9=t8o(F5-H2)p~!rQCr+}QJ=0f^KNf`Go#ic>BX9THwp&K zpiNr}_f!mPc44Pfi(K|a(dF}UZ0Ov({o+xSR~%T(>yYSYY6 zl1xY=HomyO)#h%^4>KuixTuvS8JS0DFpQXrMQoSdIg>ltDa}+B((E#uUD6rowwg3p z-IP8u?7UdDy7Y!1H6=`wURH2-bvh|fK#G8WRbe61vSyb#(8SQ*!1`B(sNXRXK4 zuF*Qrl|^}*J|>LVm4#~Tf*E1byTrYg`wfed$zMEs%P;gTNgkrUcN6$Zl_}b%XQ<=@ zAHI1$am*SfP#S>Bt=^_T!N&3Nfv4^IC!>;#(t8B_Y_V?J)7(_~U2?oB_~_d;I~c^D z^2Cq3WI0p#HwIZ(5lP!(yJ-aFN@X`9bZI)lWw8 zDQWUq8$?OZV0y`=Z`u2_m77TP45Q$vRq()5u7uZkKL1J7x!gz@e^iyVl}rDukmxz; zeib~OC}M?T#ljm;#q!?DQc{0ZOimlHA21IWf289yol=%F_SRo|u^MZ^=)O=kB?nnD zB!{@B|!$kuFz%k7j;5jr%v+l^)+X zD?g_pj^kUan3_{ZM59h!#Afmcc0u4vf+r>|7MR*_+~Z&uO}2Y--9jl>8ztgNLkZ&v zh5C)+T`^w*6F;o9@-hWBm96)iuHeUVEv6*}Gc&C7-I*&O1eioMN7!AV7VAmp+{Ki7>R&MDsq%4U|up9~Qd zW$uZw9pZ%TJ{=;T&n3M&p@-u>Ga*Et%=K;=KkkVP@ow zroi+u*to1Toful=4y~B42tUnhLK+xs=oS98`VgaeNyQo%vcy=uyKL!ZlkYtKbCGCt z|7G(+MNRXf9wodX7*8p+=nL8z+fk1blPfTHzX!-C3V0H7e9QId?oJ~=O=O1%(9wI0 z1-1!j>2B5;wVirmW5RPh<1g-E(z3Yt#V$19$KkVFSUAO4`rzzl{ktr2N>{dUGJC~V z;9KHK#vJI2lgt@_O%Qp&;Kp?E{-Yq5{%gT9FWpmND)M+EutEidNwyY(;!vlBFLExm zY*g;mifg0qO8*KZ*sxwbxNHM*I=`vSe@z#*8-i~VlB&^1`;?A(J4u4jFVe2}zHiIU zB`ms9gBQgP?@m*sd#aL0A!C4~l9i!Rb8Bg`f$`3$MIxW5n$9Xl*02xc3CJ4Iqqv;0 z^Cc^<@D)T~r@D|8Q@0g%$wkA6+dK&bH0J1CIr=zLJQ-YkfTalO*`Cdfw;yrcpfwT| zyiiww7Ghr0nNYE9SnhQZ8%hdn>f5HnWWWCFB;uMX^98-U8g`3@GJ(TA^Xl9OB=M23 zJpD%d(vJ}qx1SO&vrfg>$SLUJ1;gqkWBM}Hb9Z)UGIQm^_1q9=J4NnX7aOl9;|e{J z_{T|X%@yWY_2f4Mf_#B@wrYk_0!bfY`b~2~i=(kDuzGJ58Ip~<6O`jluD~j`#P&~M zw>K8!bC-u4Mkd-c;%SxeY@(zI=e!9euE=%_M`$wjuK9GRhti$aXOqR#f{Dmxg%THE zktI|?Dhd;hr_1E^$|wJofN|WiPtn?9K6LBY@ntrzRUR#($K{()ep*yg>L@|kWyJuT z1AMV+!y+#tqUn}W*2sBb&oi8Zcg(BSdQ%b<@JMytwk9sFgj3!`9UU+)8N#rcPc$MI zLzR;*V8>Q~*xNk(uZL^1$Tt_);+`5GRnDSh%}XC@YW~u+D4LMzA{&R9ZP-J{V0O)S ztM~V?Q$@BGmCJ8c@T8F})TIT$rcLeU9q;_>6jMy@7Pwt1*xgdDY@K+;jj(<-ycax4 zuJai&GKVBr2}H+u*lUUE0v#W?Zwxt1JzK!8PO}QD>W9esRev%oXrbj&tENFMML92& zb&=?~1chl?lws}>xdbZmF`Lk~`claw%7G)&yfW%DD~hb`+|Vi5A#2#E*;~s+n8$$N z^>tyj47sUAxBNq*Mi^NcC3Oq%Ra-0#nv$V?errxh8~VT^du)tNt0ZJjdFBhdl(Mpw zBVm84`emHV3{}%ix80mhjc0VVTnq;x2# z@ZP#%=fhKnc-BAa-+1lwK#V-l3!8mEcPdqI7p_Z$!hGHbULvd*+?LpMRRl>_omhF~ z=yA3(LmAoLD7rGFjIu1d>RBFb>-X2WU#rXowoS#m3z&m&kFGZlBput+sdTuUp-CdJ znb%EhjpR1tI)pE7$}_(-_z=N7QNc6s?1$P~4s?$J0&$mZuNJ33T+=dtU3YxGdKg4V zQF}{Xg2`9xKVF3b*p@INu^@Wv3<&Iu*LRBN{6@kh!gZad@jk&uWLR55V78$mhXgk! zItj|+;AuhZ8{VtqFtj=)xX;bM)~$@l$j6Tv1aH%!=zT{U%ckO@#oxP7>dJ&(OnOMI zu{1EU#}R0Y04^R=jgK!<76cn_NBc6xS%9d}_U$F3WGJi*Jny5(&rE+q%(9*s9&J$$ zpBX5zY$cj)5m~yi-srgxVjB>Cqz@;ana!2umeLGKtg284YR2@Z{UDzRZIYpyj zDkC$8z9+A8uGBtRgXRY6vX)t1LnpQGZ6!CU%xX%fFR$QGz|73wALqOfIY43hncRJ6 z8ByQDx@bZ5O75>+B@EAo#lIa&0cJ2>h+tm z(wW)Cnn)oCt-S&E#Viu_fk#N$cPq{@=j~X2=8OR}9X_-Ye@El?OuR!|9J72ldN{0&ajmKwu zHsno6)8yMSqF*oX=U29g_Eq+~gQQY&#^odA^C_|db_hhu6ZuJu%+^L9Uq39_Pyk^|AzWTBMo_CS^wSP~csT2rs`S-92 z?k;TCaH({HhTZpf*-X0A_>_{YHFJu!nZ&#+cQDO}ZfQK}C~1&Uw+TPT=MY&kdMU}n zadZf{`w%FVA*NC4SLy}Pv~rdWk)3gRj_7VuD`MFHPgCNtut( zyd@SdbGyO##eKs_16XR|v<4nUKaq>KkeaFIeZ?sle;kKu4v}0ykmPdL6*$P_|KG`@{B|v?{oF@3i^0;Uqlyo|ovegCylP;Hhy~C8 zT{=`k3A%Vr_V)KE+%`Ykg7_j;z;!zrA9FkZ9W^|Ve_g^AyFNcBU6fgAno~ym6=-r; z9G-7tBKme81zudssx>v9z0I+%2xfijl++mOra}-orUHLlHgI_vz*Q+ka$HxdKw1nB zyKne@1iLmH9>BX$x;pAfFzFmBNgH{sg}IR&4kAK%2$(48yMOFp#bJi?%Aenk#TPOUQc0IDue?w#90Rw3 z^S-}j6fDc}9t+T%ikvdz%Tia^j1|Z@%rvUic>tiMjOTzX1bKNf$jPWiq_YcJd8QLQ z&q_fFw$;ZQ2ZcvvXYynUBnz^a&0Y&ffxEMs2U75Np5>i;u?PH6YMTJ|8>j|AF~+>c zH+~h1)fI)V!0AuHhd`{AV%sTsVwQVHB06yVDN;L6VJ4hDd6<19!Q z&cVm`+|DV{Z|+ymm5jL2wfeLTSX40RVFA>4EB4|<{m~E!#kUvKwSyAnqAjZtXEj3Q zxk*TFu5c3K&+AR5$-c$fT;#V&b4SuaXA$9|K{?9L-6 z$X~#^6@sWoAY^S(-J)zF4Cat2IHqgTa6w%L?7d|%9pPDkw5G=Y3CAe3xGY(Qo@@jyW)^t{Kb%a)bQ@mP>LqMDg%_~c)m zSI(?wAJg{vrd??i9+L~wiS|~x=NoCG&GL6}r3O7kkj^hlIq8%JNr*StArRIHgn}!s z@1bCMZ@r}ELTU=Yi`f~<#$Qf@MCwCVErngTB7A3adCPI!x3-<7`F3!a2Fyn(uGq~7 z-k;d|&m(*8OE-=@o~YB>jB1F^wx4Uf3q~>uKp&VlArU9`Aru(oLXXeJ)Zcr7kFK{5 zf)TfaoF@_$Yu{gpX}XmP;S7}9ZSH%)pi)r1Lo~ZxuW}0laDy0H*t%rs#CA_p@Rb(k zZnA*CCPy^8)jm1GeTTR%?q-r>7spdJt8D59&xletzQIq%N&Zs8G2l4UWY_F%!)MY{ zFfmnF}^@tr^!eojH~dVem#$SPzfLDNZR<3FAjH7NaP6WVD zs^c5ZnRCj`4Qv)cFcn3-u< zcUw#_#fe;MsFIY4?yYg(cWEOsXz;zooL|c4y4oRL_Tgh+g~KA|-u$+%8&gjX?xTY_ z=Zsu}@=-ph20#%+WYa)Ghburx3N(dU6lVfh#AX^t*pbf>YV$rf;@;T|HV&?hgrk5} zCbn#UyR#7+L|tnGVB~R5d;NMjzCt=B<|-*O@ZgPG59M3}dCUOx3ioI4^_Kmi<99tu znaXB!DrnR0%T$n=E{l)>iwX816I0IT%TTOAan%LnbCVq`p-1BWIJvzTPJ?XJ8D1-Xg<^KT4Iw7PAKVBkG zLd$+~EMP}*YPl>obm<53hrRW`9G?0ZTiq1HmO zE{DjssfApLx8g$?_?n6%c^X5^L~(BRPWtdjem8+@`1S8bNp)-hND@kaVWctOidIyU zT}C>pi7C21Ep`)2A^b`)No*oq5m|#x`OxCx6U4W>z1BR{_&K5&zy@-rlONXSkONM#o!8X$6kSK?pzQpn<5z$2O_DwVZZJFi)0-Iv`R;yB7 z&(&^wXwgmG&BX12&AY2!t@Lx0g4p9;wm(}%)bw1bz5Xs zg6EE;^!iBzP{%vXq}%@W$Bl8jlViGc)#9&jc7nVz2o&8awc9j;mjK>PFH0CMzeI4r zS++0X@;^UwnL~iM|NJ$$e?M>|FU7}K=RTz~CwHdktH|QLKtGfcSI$Z$BDfE5ml7q# zaBXYJy=qV~obqCC(U}72ek)BNC`xHHO`ZB4f4Jf{ka_5Aaq^;U{7Dr5k*5i%pCosl z%PZTIi%ra~{EK-)QvH|%nkTQ_%0@UG!&5kk1qfEe)UY1FbfftBhxg2=v^zPe%vAP)l**8t|9sZB}=lq38v5cy3gt4>Q;3^HI0kfkLzfQEapS3 zWLZA_(ujl5(GCvo8Ol)~c0`mkh&<$ND&}bpUh-F5A&N&!Bujs=s|hDE1`& zQa8NOyf8}*R-|9{W42oF$EW>{s*dHO;+AYAKsBz6SIB0o){OJEz z%V;ksh~jwAyd0|p5!~A)_is%Jn}$hMAd!)7nF||Lty@+)5K!WehT*= zFWk61u!IH`0<13s!-A&q;*}!{5e&JN~Pr#*c=xU zlY@);xq|FRi&P+b+O|4)MgvSt3r@$Y(@aO)TZmO*LLAB=gRP?Su;?ip^OauN0V;UsaTMLyqBBebzFuZF@Lg9i_*`}`Eb7gZiq}9|AuxDLrtmmd{H0jR&FH= z|K_Nttk@r-k$|)zN5*aasC+8USqgzqzSk-yvnNP0409~9c|09ab`jTb>1fm|yc8t0f?8QK#<6rdwMG@&| z&(?n#D=pCgb?YubT!__m-(A}wl8pv+cnC&*NgMg-Wg$rMQUTs}y@X3w1_6ru5H})1 ze82^$)buMa3VOImBmhuVkj`<`^3xA^tLs-ELjgXob<+XIgRfE`qzb$OS(?L$D`!nC z8I2>_zXzkp#T=?tNq5;YeSNl%sfBOl!&hR+RIGz;zspLCbVFn17VmtaGJJsKn>su| z<1*uN^uG5MY6ZoBkK^MXOXl*MCl&K$&vw5T^V^99S*mpQC9cO0G=Wk`4?u|;JgP8I zaF44Bge8b>nRo$LrI^cIWesUj)D7F*5Vn36r=gnEzy{<#Q&b9mtvil%McJ*t*Y$+f@Kscw7{OLPku;*OHf0sGMimb`%@%?`DQkUtf+wt> zt^&MTY8lk<=85Sj@+-GzGU+aIGd4xov~v5t`CcaUP&>&+GM>IMD%XCyu>G!V?`Wi1 z{`)BJ&=az-rb5TEYscG#f)tZl$X%LQhZ!KTZ`Af z=|sX9Zi7VJO}c97Y!dGd0p@-#F`DobNVI53PPsY)>}s?OVc&K?Pw>Ho7WC4mi5S&&(pn#t5)`)Q&t@UWpHCg@AfndZ|yJ9(<2j#wR zHP5lhk6Z4Zgh@;b9j{KltrB5Rg*;6l+DFLmU_pT`Kxlt&m$w_J7C*;SZaE>JXl9}Z zk?DAHuv|av@r@>LPPOkU^hBuWWc`=e&7dFt_-AZ1Pned$?%3ajgZRfsKd<>Ol==N+ z{ohD~pSPmUW^ORIz*mLhN4Wm`uY41}P^3`m3CE_U_0aF1wVUHYOvDnMfoFd=*5Gr7 zKTcoaDNMO%-ai6A64ybpVchjB_D4)bE2YJk~+>_Mbq0N$@{`{7~ZWs`8&e z{u9Xms|{H-vwYj+Lg}(3Ji+)QoBTJsWq^D1#M#>eCi{JIr19+5`f4+0zg~!`-pe4x9tyk(Wi=PkxYW*{5tnANz z8G*kq-S{-%3;ef??>_QBY5der@Zvvd{3ngW?S@BO?57W)*2xV@pzw6}{k^h}fOwe< zac8pu*cXe4w76wDSZXy55IsqVIozKjzmf{?;4F(wS zM)Fq-SSSf!2D~#3aIBV=UBJifS_H`E>S~uflyCO%)d5f~2I}Zw14L$s2gd<#169EY zRJ_~vDk!<5pk9TBb>S0Ny2r`CV|YJhC}e)hcAD6Hx&0wv5y<9NVx-iz!JWH4dr`&} zgQ~x6?U577CBsgc$qpbbMmdhzf|`x2Q5?c>8#IMs@*qqUv^`LpgU$drlyK)(t!vV? zb%;~O4ue#=(>~-9fhG0O<2Ppzg)R4uVne@D?pz5UZ@;13d%*!17i_j)+95h!rC^R7 z0LP|g7Xbu24ak%4u+94jz!&*SQ`DZ?1gI9La>y7=oluI40Km?D9i+XBWiJ1Q?<(9}DfmLnQIW?HbVM z(Fxj_Vp{=1$mX`Q>0&(oE@+Da#kB}QnSkzif7k^y7AXy0uHTg;H1-*724sr3Mc;M6 z?1OrgNbYw*@GLs+5x`ueNpx%#;qF>BpzOsu515s7GwXm{UdUdta=`g|&|m!0i6bxL ze_lAIY%=N=Q4Byk5m7Io4n2s5GY$2X5Qw7dB=8;v0LX-#ZMrX4kBryetaSxq#c4y3eIxp^Z;74JD(ScXp|5{`=Olm{dVmsWr*#e@Mu3UOax zkQgYx3S#ykK*Ar;CiL{*y|_9ZqAVv#>9+Y$Ky8Qh@o4Q%@8W6J4=-l<$NX4PUzyUN z6QqG|3k$X)ykrFMAXfpmVVu)&1H87aJ4TYsIqXP7Y1*pDj{I#$dgkNIn^D zxmLeN(U=x4%Q?h0atmsKN(sM<77gZFuNc{7j0Nz^G~g3SmJC`;=jeq{y6^iEZ?I6h z?^q4{Db|9T8gJxfZ%|T+r(c23{tUC0CC~6 zFDoQjj#O{?f22!|VVNoeyr-3cg1nqIz=;W)Y70zP)eMGc4Xa)8du$NNX&RUa8Hla| zwP|8pR!y^u)Zp}GfVj$E!++VbjPZ3XE*$jsv=BUO%4G&BJPB7o$B>2+$1Cmu!i&;L zC4K-_LSPl0fp7XWtQrdlLVVe!Xk>~PYj&A#`ney-wEZcO+UpC_Xd}=PB`M8Nq@tTk zdot$Z$Qa=AIEQayYg&0`$FZL8Y=CIS(~ZX5uIjFPW05yg+39q7e0Tu=gDakb#s#Kg zwK!b0B2BaWRB}+So*nJ>mEytNpsl?RIMDEx>zaHwdeL;0&$`h*XAjmn*lF6QO_y$i zZTrgZV!rSm!u9UGX!kyGdpXP`>%DRutiRAP(-s(z)+6B&Oac^PSpd=FmN%1UZXiy% z4b?@R07NS_K!jDQj(991eO@>bqjLK-`9y=Q@+PxJd!A2Z8`ys zIo^{`vBXhAIXSWNV*r&h^V8I-zFSRe-{~lYa#Xra-W|1suYH_f;D?E{({=*=+eees zyrc2m-`l8}Qfw3iU5P8Z5;C92m>h|}))ew`+0%EbueAm`C#9pJGD3>LUvwjUg5Cus zE)bH>NFYgcU^73cK|jmBX_OEnyWTjK)Ribn4c*e^IL3y$=j+;VFKlv?I)Nz3Nf&S% z__FWI%wF_}kLZ5{yikf4Ghv!fK6S%D8mL&CDvkRn?Iqd$m<7P8u3xCIjFa+?gg_lO zQ{pIHoDEM2Rg+?Fx`}%3YhN5f{X!Klg2%cltf?gan>mkApwcbAxo{cQ)T=?1>iFpq z%so*5Pr0m2lCHY9Mp-E&vq!|@FmUZLXGJ%^YWTdXWH%e8!Bx&+^!j?E#20qJqyFo7 zk-og22oi2KRxR}pN{Vxb9^7GW8%nXnmk()JN3YH|P$C1f1dou2Vd%zZd$BGmm)oNP~)* z)vlugQJ-%iDEUq968`B^qCHk8WkVo*{49Bd`1yIj6r2W~plxg3rf=nCXw(JxwL&fv zyf_O0ZoX$)S&hnkI41LJiKo9K&0okpNbgqyme1s9iyZGfTSv`4Gue#=Etst(p5*h> zmtNi?++ba{eh&pWeP{d>nL+vUfxyLC{I_K8iuQAX*yp8&(s0nVD+iiT9>t+J#7G(? zCQHM;r!B_Fz!5h^PCpo{zP@mSz6%uBA{l|nC->%AZNI0yLkvX=EljN@Q!X*npY^WNHtr+(;}$Y!)VI*$h&{}r)h_-xvFXtZjc77vS#z5W(FX2=jcOim ziMW6|+ay)kB8$T`qE9W-}NaWtg_0wJGYow(z5GfBZBvVVo8K{ z6Jc~o0O5bca|wCJ%CFZd%a6NmuSzm&-k|s^B-Njz|7I?wN_CsVVLAB|AtU@k zbH@DEQdn##;Vce&xF%Ug*I?QDq5KfMe(DE!@>+#4heNJuxFC(E|AMFb(@6f~MWHBw z6BsmGuOEgt;H!85RQ7`HQ~HBW=T~gq4~BhoU1XR#96-(x0zY$-NBF`4u;Mq^!JH7l z7QSIN2ja8eu27`{jF@Aw2`7L3@`2ld>d>lL^Lrv*2hgWQ#5+g&{o4t$5Fy2~Yb*3d z1!p>Op6oC5`|Gx;cnXQfBZ$rKJWYLZXs0>;ximr`PqOKoJqORpuVoMe`1#qNhfIP1 z(iidvV^6vz#M5bid$7MhPXfSi=&rdOE=&^y}b!QqLY7oKMg;W`!~6HkbwC{JzS@+f(?_{JX~7c-e8^nwjm~m zKkP{$^1FZigAo36Aqir5WYo1QP?80#HBW<)5egdB&>*j#oO8S4)=Z|%Vapr!BKorR zMkm8ueH*ZtW1ZILBA*jb4j23F^J76mBL(G=fPC%R3dMfOfIA|XUA;X6<+SFExhbci zj&T9oZbk7TTdB--h-31VUjju^(>ty76)FioXyDPm2rn2Y35JGN5Y6QdGJ`CK&1v-u z8{j#rQJ8G3gS8~sugznN# zd1Rbk+5s7fBva+mUF3-i%Q*TV9WWzW2hl+^O|@uC?Go=?58~<6}VhPmdZmmwkMLrT)ujD0YTYOj(S>BYkMN1Yu>_eDOf1 z)U9lllN1d_iPf1odYR4eCIxq$@|mZ(>1UJNJU)6NN$ItcN6I2OW{>ac9>- z^mKdIKd@#9>M@`=Vhf%C1xPkI@518T_qJ?*FmW12_ArWf6(<4BGgvHuJQ9#>;*{dh z(#$M3ic*1g$`!s?u!-HbWXB27hhi1-*PyQ=12gE8SkT*Ou*#c2uO158i>e zDxRa?IEg&V+l!L9N-{_Qbd#(CG=n61YXurb6Ysiyf3F%eJfwW>U2eSSk?@{2I?L9A z?~ad9Gt_KxR&ZxYiF;YW0LrnK#pXap8a|T0J8$W(b&{-MnN-pi^khzW-2}~`+Kj9e z)%Ehp_~Z?1=&y~8pw?{vxW_;W5G7IcN=4Zz|N=Wmo|ImM?^l$b)7T(>=gimv@@WYwSEPeY=DHt)ntK%E*@`OwVnL z7U8z+t2b_km;_vq9Wisf`^5ljB32G}0km^ElxQ@d`K+kiW)>X;&6BZmpodfG63CdH z-4vAj71vYnKh)>kH2P!^E(`1dLV!kWH4ESnDV%1UpB@GCvB1Hh`C!>2_V@vC-!#AyrjQc7$JBFr~%;m+4plIxsmNvV%K_`gK+2V54K7G!k6ks%?|1Oc>;crX+++x1Y%DHy{&rLXP0EMw3<@yY;^>>g?Q3i zxyeMHx9kWLtn?|H@lF4TWC1WzE85gIe)-%@F{%dnpv1ulB0rRZ0Rg7c(WmF- z@E9S|b~*tqtUQF;6(CnB9qbL&rG|5s(#R5feUlPs<_!0;Z)F~b93Qb3NUgfaZ9XVQ z$>nhExyH|@>mjh!xh{=gJ++YOu_jNxpwu|=1!CH~a9N~KQ@xT*g(jYMQ`;3j z$0fWCYNA`I42`g_BqY8Qi2j#tWq*$ko(S2U0@ST30RG9bwy-Jd+Lp#Jh;`L(a}!ee zc->}RlSClBu3wQPv@Kif)ruxw2CS>e2QtC2BL&OAkO~0b<^<)jCf1W+UQsZFpA`Z_ zJ_!a6w1E*lJ>xMx=C*3PwDxBjzs5CS*+?q+7|M~9-c$8p{zo|jDv<$Y>^qou{GobP z%ra<3C8;)W?J@S3f z4UAq?491nfmM6(gmeJVrYnWoIK!wZee}2$sRC;HZaeo?rMBAn%6tbnwzSh(@Hhnq{ zcFFH(5x!1u-^G^7I{`zCVY88y%Re~ouDepG2hS0GRm3k5&R9!?g)M)E#tO;nIHBD7EW0v@4PQ{W7|b7v!Fl-p#bNf@9TbMXTq;?88>ko}dae0jL<37*A zZz&sf=jO|NFE$Fz;#mL+=_+V0DtIq1Q_vgLovT;Fr*uOX&j_>S}#!JPZXz zC!Arsb-gGsbbzkGcvNEft`wdxlDIA{F~@3g8Ni~+rA$aCiGy0^`p4>~<%_F=uebm? zl(#!ygLKnNCQq&n>ZXQ(ZMiBlzq3&Q=2r%Me4e7go3|zoEd)_!Q zMkgH5+YrY}E29Htqg5faQh##3X~ekJK@{MeaiCC-Oh<2AQ}h3r z9VY@pOtCpTbK1jlAQMdxaHA^ZCk_j^J;aDX@=~wcXL#Uweub&1W1zpf9IF!dFQN3; zRKWQEWEo$$Eylb2KUy6AF!wQ z_}%_*MB`+yHV?HMw$e*+e^)~fs3>uku9S27T>OWFs!8&P?P{dBV)nO^Iug0{BgL>4 zsjZR}UmZV~&SvP;5}Wr7-<$d7Lw@CJzg&G9NW0Q;@(xdk((Hkrm@HmhJDkC!0+KtG zCm(;T=GV=CNLQr-Bs@hMFSZX)>*+z>MK5G_ct(_=1GKT#nL1uBli z)b$8%4i&OZ@?($Hhx|06*x0?isK z&IIX{hiAig!PDZ_A9O80loa$;_k)v_QRUTrI4Mj4%0rL9{zp1I4+Qp~di>n$|J38B zD4-V#|Eb4MM+UvTNe|^codte`2Dhc z2QF@hn!#2W|69mUllz}U4l2w4u|)QBtFTYPljtv>*kSzRRSC{>+E@uDDa%(9iXuWH zPtOEd;7s3qg^zdpl{YT6sK~hdInkyQxNgYJ4wYnYeEdHdJMW&kdTd>AQG3$R#>TXi zB>%mQTTK-!FBnb0+BSFg(J=qiKSPtR?|4juLuFK6#YT2$=ju6QJ#g+^Nwf}+F1oUx z;I!E~!`c4Fsj3F23d>l0`0++*fdFKBz0>#yi2pYe^wmBmxPnX8b<7S%d%p~VObKx8 zUGpg&cMcCyu;7yUijPwNy#M!iA}o$=%a<^8LHGDDj(gOrH}yOzYX(OT$K_wY^h=-- zTX@^aC!j&n`e4??P%qSWLZjEE9~C#i!S7_3Dw`x87~mo+ozXYD>?OE!)q3k;@&d*F zZp@gMl`d-&^NPOJ*1qWSRzxxD_AWmmQ?-D(L263(hWnKu;h5swjGWVxdSQ4PgFMpu?z^ zcwoSJ1@s^`0^oC`{8pdMz-mZ2b|@~cKa1gS{{5?EV=WQN75JkP;K};XSOy4|wgLcp zJxR@G1DMrvLg3tIms$jbJ9p*fYs)*4%XSI#++2M~QQ=9uwlxWjy}__EK;;1|Faz!_ zXsF|1XsEai{x=&E{|Vx6u`hyNo{Ip+_l5>6cMOe{@Hghu=Ts2i`s+!<*>@owPzlQ%W?vB01N)R0=Gx3 zn;Eo5rrI@~=Zn-`CT{8ZfcZRGcFqH#eR}Tv(74r)fMA6Nm_{HNu2{_83`QywpCErM zRJI6a;ofw%9%rfpkoO3S9%DR!0DE_OngCacWMpTObIeo^t9i+#Nzc>>Dm~Lsj!v-* z^r_BdnQxh{^VOK?jlCAVbejwG1;YT*i*8^EC}0JjjC!LRxZ#+QAol*Ho6Sy_y||!R z3?wyMEtY5iY6U>-1*Bf1(Zo<*>&o6|0(VlVZ_MTMDZQJsPHR2yhe#;Eq>ucnOKI3T z0=IKu^s(s#H>ju3xYxy3>ExG4^@jG1Igem<5pm#&?78u}z|isekATuN7U;gCZ~Dp1 zxthi9Q81Q8f(vA$ovQ$%X_7T)(pR7M=N$G1^Ssmf4A)7ax!ajK6U;oUCM_Rdvw(@% z4WKAO3`Y8nXqF6HHD1a4{QPopwI!e1`sUV*dJUN#VBkqNRvJc452ZWIvAY5Z8CRa~Q}9l+$0OVPY=pJ`)c_v3h!o2yoR zW6k}*3mch@bTt``6^m!?+haWm#rI*DO#}5|isdm=t>OJKA8$`L%|Kt@+`6+gn#ENL zF60=}=6TgX9puE=qFuS;mcKVsyk=mXXtaQx3qOUc1t#xu9|zW+-%a&&WN{PcOkUmR zh8MblGQ$J+uiRfKPR!+858DWi=uP6q}yQfk( z2=bH--_}YQAwHXVfj>!&v1uGp(`AiFOqxgRO~059<)o>$cH$4Cb14xhrXXM+RAU*r z&M9uDLGGTZui4+PM9-5|(LXX|;NZ!N*yjZ*-b7)D*mnlnnwaSzk$tZ4(fQ1%*!TM2J@-##F`(J#uXZt=CP zrYQ{*W$st24BY;gL$&%$DEGJ{O9V7sI^U(}Og=a^LVfe8SVEq8erzCt4tap!6^c4#r|O^v}QjkDFG(Fd=dU8MIU0*D^{ z3L~g%DECBdv1r)#-Zv60zV5Zv6hgpK;37aZ1SSNb==<#NiJLc%HUfLDahw}-MDO@( zmdzJ*lhSN(KRIkD8J~olY>dEL*B)d4)Anmzzy3ZUpT270c@TBFB*3jsZG4 zQyIf1TaT5Juu6q-Pm*CxD+`Gpgrg0NJGS!2w zsOZx?diRnySJ^w8J&&T&&-I!+Dc(19?WLvXFOhGzMa)PL<_5&_P06g2mM<@O?^i1Y z(g^giOf_@1-NGd`?Lq4arZ>o4?uLz9Y6iG|IVP$A_t)gpFx&5(EZW>An4NERUKw=` zpUGi0$=l#4+SClP?Br!=T+9mK^D^C6!YeG!4xQS>TwdF(p-!;rVJ<4&e4%+MYpeN9 zgNw|KK6Jrs5uSTSfm8CtEv4f{0ow@v9J&ZXNY*m|XvDA)hQXyG9?>Bz?E0;%iRhgTbO4 z%kKN?JB2l}O;mEnrC2OmuLm88bJ2+N@ZVXp7ie#$xX684v2`sNyYf)8^=Qz&x$!qG z+QqV;;>cmQDF3nqvt$kKP_H~H{eRWdSfUMB|w#F)VxiVy<1uEgykgus&z zC&IVxSOHRc0N;j;&J|wg&vRh7#l*ed+u_2`T}bbzfPXQA0jdLP0NS%Yn9*joTjb)9 zT>zF6Nx(S;Dt!4yssd>r>Dx* z=5MGurHbq3x}-%_x%8s~%&eV{|A`4-+Iqq1{H{sVd2HUhgGJaTv-da`XXv-#4AJh!I(i^y0 zk0F$Hzt%KbKe69;{)zGXj^z=9;}_}z+xlQ*Fs|1nZ^Z{ySN%R!Y?e;GFw!GGZ`He3 z#DaqROxplG}er-wgD>*>wd9z~Z* z^q)*Uu;{>&7>C}<_w)@8h6~z!B87wh7tsPn~D9cFTx9Ev{F zs^~vXP1-SEbl<85-sZTmz)ECW$jE;2+N1-&bJoP`KfynBqB>iZ&pZNjO>J0u#U?&} zaaam5@_rlqlMKO_iV*(Id+Hk>;J@2?s%En;g)U&R?xQQKouiaK{p2jqC{S(6b9o%bFHWYs$HTY5E+EuKbo63iSadY+;kA}5af^(h9 z&dWAb^9X7bab^xz3VI&WHAqfMeBT%?X}+l}>8+=~@jk9o7OL6o4Q8W21q{+>4bzRE z-&Z`NUp8)C{5GOw%<@^+Pn+tth<858%a+M9Y;|?OglotD<}ans9E36blr(dOD7vs+ zM%`p_6Yg<&ZY62bp(Um7w}}Q3{cER(t!*EtQfy

      <67Cu*f#EmOKrinJ!vObjO6 zJA_xsO|aK@I_OOIY$N0zymATKGWfjSSj4DZR%U}4^>(;xY^|aN>x1y;{cQV4*3KQH z6Ur;;N4)2adp&XEgox=+g}gn}1+WJrJ8$Sactfe7MHAb6aZhTqQwSc+j+pS^=~*jf zT1yo{iTP$rM`E&!$hRt+T*dS?F3HTjVg(cDomq`S_wv3o6}wp>?V4P8i(C^{bOqm+ zn!A_kYZ1ktFuWMpL1n52Q~2ztHJ|ffn6UMjLq}l~J>QfD{C+8*o{(|(sbk3@6g+Dr zOO#0rH+~QGR{uWJQ@ecUt4dW84C|gfI~kEE+jv%EaiH*|bd7#-FD&+PDOeao^mk#8 z`6F49dfYjs6JJ8tu|s<6aaOK|_p(AB;}f?_M$%VFixo|t&b#?cCUK}d`0#U60p0x>;k_b_E;v{Cu*) z2KFiQx+rcZVINMN>h50d!+GxM=P#1715BB{d&O!e7T&!n-0OGVG8%k-l3>+fm^$2CTDq;t$^88zoz zI}EbcoNEnnbeimZP!ow|0;<+rvte4G1S1|f5HT7-8ZfpU0^PDW_9fH z6U?nm3HJ7xcXU|nlBtI@8XeX#ogdhdz0eF:zM95!Z+BeKTEyM3Y3QHfO;9UEfzIxwpEi8)^p;WM>=7w%5Km za-QVu{I(KGN)P=M9+8_Xf?>E9mDcOq?#u6H5y#(!t9|mMFAjVSNQ;#~;!Lt9JG* zPHC$YbN@c8RmSz~?5kj2Cpg|G39zy+&Ko_&`H-J7zk$-+O4 z`OfL*F6OPhyO4cpu0=?)_nupktfPie@^qf+U=hE;-HAks^PW*AY`&iEi_^VWd7L%% z{9x_b-cupX5(&>LmndSMenX*pQ&QC{G_H1LJ8O1OF>2(ZeS=l!2sGB@Ys$BV2ZxMt zJ0u8$CUtLz&W2b6QH@Z2&b}dTzi;HAAFg{Wb@PA5p3C4^U!Y<-?L!sLJr;-q6tPnK z8@W*d6lmr}TkpIuq%dUwJ0P9pd;Ea3v%G2zkC?R8+1eoc*N4}H+S7Z|ld_vsrULrr zl^l8aeaoxY%tauBV|>I!j)_>{`~k<@2V)P6XkJy)=UL@vKH$?LqEdGItf6};_|{kX z+9Rc4b1oD>1y9mv>)UfFbR&Q|5L!cAnJiZU{1W}eEV)*X>b;2}Y?~#H-XvG1Nhe==0_%zBYqKnzyw^)xci@rd!~=Cyl+i!QxA$g~xCP_}lB z&Uq*wq^m3r^*cayNPH28LZnjd7bJNk)BAx7$PKWPST&D&b4P_`XLz0+mdQtYwb4b5 zl!^tezUq$;F-h;=TPBHXu$qUhjJI{~-cF(JV^U8^Uo_qoFMctzquJ3Wm=xvQ`zx8x z=9%Dy!7eVR+8x>SH&bVx^t}vS=|91Gsb4z#(%97?i9yq#=ygg%LcW*CArp=B{fiI7 zo@cn#7_o2>UnCe^IYlmZUy6U_uUNiw>P*`EVi(QI-?ajB^cpo6q_e{}^bMAaX9;T7 zR!#U|^#|x5J4o-BqTHI}OjX~IsW<9KR_WC`3kV_@m%EP( z9CLa`=$+iphQ0Zo=2U5l4A-51cW`enNA-OzLTf9}PU_*=7PdjV>hvsS?XrFXsiw02 zAg+5ZFt9nC>T?F|cex_e4^=yN+rNL#V$*x&H>48e^F1*nOevZKvtZFtJy)^1IpS`x2$XQb)RF2!XXb@v#cWpIan{G7N1i%{j_bA2e};BzyqWNDY~_Vkx#6NZC(0+e z9oP)pbXDb6nac*X62WYaRj>YP|i8}EsdP3OR#ZrRRfr7C{ZfOWL-V3Cokw`B3!`I>2C#dtf<+O5G@1I*8F zq9?lsm43c7J~7+Kx5GLeBV0_t#uPo}NH1x?B&xT%I%05oj@piDgP0%jNu>O3y<4lF z$+UFPq@=Z5ua)N?V%2IosL?vzo?0L{F)+Eywjsu%$hil5u!OgMJfe0K-!WG(TdQkr zWgF31_aw1s&XYj5H^8;0Ks)ICF7PsexqPDJ&}ij@Wb)mwr!2spk5iPduX~q*bxCG& zpq}0lq)ZZ9e;1Uu)`>bHr|^nm)@~<#Kefc@es}<0>fEvd_^#*8UB}7XFOR`rAOFH z7@yol+S*n%zQfwqV7kygw;e`~0Y z^|W8Tx)7^Y?>739FqG3FCOa!S{b-oJ5Jenyu;nhWmL;?V!kONVOP>7}jFhvb59G(K zJ}wF#>w7YOflaP^vRNwi-p36XpNLz~UUl4=Z@Qf4+V zk%^d_l_fBmx7=R`6W4p69$H|&nzQ~jUfgdFQ`?%hrq1SXoF9LjC~A8^aPsR`HHNXb z-Vp{c$LcL!tYyr%`UP%PpzzW?h772hHkb@aOiww}{y8o9<8Kr+#L+lBhT(@;Z6@F?zwVRC6)MCp`9Zi^t}+pghISsguBx{( z1`+oTf?s_&*kHOjh<@ifvnTIsT)#w)k;VQv(zDJiB8E0wg@^vg)}2nq)i&&X3lWoB zm3KJ4V{dhv?FFh~0K)GL$~&O#dJ1NF1)+KZjD9Y!(wy~^C%nw{w@ai_kjoD{Bkkoe7rsWq?;~ zLw=N&V{Sz}D0Scoh~6`S4M}`aLmCm*&GM}Un&$;D74-vZt{m!M%FFyVlZ8>}DG2rj zOxYfR9VK5aSlcx|L<0b%AI=1y>q;<}{0V{n?dD(0C6)`5*IM2Y`$~iD=M8~GE^hTc z<0%ARReQYxc5TOH8uCF0@60XI!mWTT@#eKV8QkPmD0W-|Egct{wsb?q>ly_Kmv%td zF6V{dC%h-~Z^gifR|fkwvIhzr$j45gps72DW1h@`y4nxy^$SVrLW~yG3hx+LRTkc6 zb+JWGh_62`nYFcUo8^;Dpz-!>wxq&DN(pifwynUM-&EuN z4;*LiABf$;a5*SC|6q1wg+{9G;0V0}c(o1poFObV6I3AOXt;$WASP_FFbsR*=t--H z0KtfU=QOxuq6~%^U?1}!e*@%>NSSM7vDOt(yQke4jrGo=Y9w$oi~1NTUrk8;|6?0+`ISlmfb+n68`lSEJM1s!Uc0l2QD{os|(4UbXC@TWnF_K-M&x zk+F*v&s-=3l+Zd`b?oZzzpgVaLM(ohjr(w1ZAb;e@1ycHsr|1VN%5TiYO@GlaF zhEV1YA^!*I*jk9M*n%jR+KLl zX;8@XBhDp4glX+9J)dlv?FF@%uj2bi6(L3TEeQ{f_*TFg;(!DtF=zOAj+rn;CcWy# zGTN&Z@3*efQr`8<$YHkH1td_)tW~rsjjI@4L%VX+;&-Fn2B^>H{I8p7+)K@E*@rTM z(Idu3plBCauwo})zcfCCFea|as@ZMSp=MBt@G(hpZLF5b64a=zvImI;vGNQoAF>;K z&@o`;Z>Y9L$;35aElc56uzZqv40$$)gZ0MVmYyFO->Tp$65sn%b*sQ&cJxHP`b6(3 zbL0k`=ql4fzgle;jZzW-_uZZez7(PM9g;leAY-|S5=FT&B0h(jCj_bG7LgS};if}>-OYIYod9OjFoNa@4gQDQ`d{1Beu;JP8wvWzBK4gxD66np+^|02cRuQssC=1m1tAfM))Nuy z?6$4##Efu#y|F^W4+J<$yI`e9!7UI?3Vz<~4{5~AfT~5SI1Riy-a}E<1t;!aET#_j zoh@Jr;*Qt>H&C)pg9T`WGr_2&0(`qq6Z1iWuRm>S`+$j6>gUf>T2N+ea&EIz&L4$C zMwH51eGpk@P{a*3oMjYjyn5~AHO1JP=k*(g2Q;@xvje( za7-$p=HtpAg##e~Wlz_Fd34r1I>l$8sNjVu7@-C%7wjOlsQf~J2nS-`pwh_>_?BTS zA9*vasQ^O&Ual3@E9&4H+lA7eUT}R9<=F@0SbvnI!vmBRJXrg@+KQWf8>ZiSfpG=& z=_(vl~$nhBd}n5!`qR(Rm$bn+r?tZ?y6*BJOCgdM3^ z_bDgKfZ4|$zI}AU=(Nf01aV|jE`I6teJPNB>K{T1tuZuL9+h~CvV_W^ zu;NCh@n{nt1KB63*Sg>?B})Vykb`L~@}?RO+=}FN*y0*hb(go~WpL_`jSRand}r^6 zsu*dsz6n=aM9$h5M=dVQg?Wc@cZlGc>&>955R!-j04o!!>`FK%b(ozhf_OXo#UV9i zE5w&XJ}ll%Ji`|#Gmzv03>H}t%kK!73t(BZ#lQn4i?S;*YqLStMv9pOIBFYNI9t^U zaMje-ZF(rV1eI$SK|o{KE@#(OhF^?k>5T&Ms2xZG%V5$@%u=E@0FH2RkqU)9;@sl zK~N$P?Z@RH#K<(}O`LKi5CqUnQHVgRfo^3CM3%%kW4KNH)7*;c7G`U_dW^fykz&&; zf~_b$Op+s8ol$$a(FOPUtKilj9w& zy%6%s&E7bAs5~3W6ep+fy)?CZl8=WT2iwzg)TEtjA-e6MU0+_VYYSlsK4VysFXC>| zoLU*vE&DP{p=>iGMnLT+8M6R|KM#H2#6V|>XAXc8GI-A17(kv3HCCxc;J&ttSzhE0 zdiOP8QSW>U=yFVgaIopuwiRFeDBgiT0D)1X)x0`RIS0 zsTjN31$y3X^t;P%`}MQ6+6{+#)xia`?EuqOwn2gc!uS7i^9fm91LHWK0cs5I4 zvF&w*#;OZC??5=I3!l*7)bxXhYC)9aJk#2_$YKBLfSxUnx)I~YlTGIwk!`B4$mNrM zDhJvk=+zyvs9Qi=#aPMGTuG|3G(6-Npi2sZCO*GS0fI;xJuX(<^n+^T5ON0mTs8o) z_Huie5JEYupzTNH3MZr&s@{{d@L%Zo$GZM&$;sRjcYm<57fyo$3GpkdcXnd>f-Snr{4zoPS^@hh&)GVV z-tX60kwoJA4rn0H5x(>KC6zc7Q30>dxGO|xLZdX(ph$2kN^5hfm8KqLw$sIVOpPx9 zDRC=GKD@~({&1*2c&-=fIy|oShmgbfS!hGR*tG+qYXuwt-LT&TLLW)0nJ8sqD?^ku zeEXjsPhV^q|0#M)*X-T@VztXp)&L5`w}b2BMr6{^Y#?~Zq?C$^9h9cHNU!rGx(-aa zA!$B^h8ljBkv6#RG2oU~!amLg^qXUdiEG*+TmXsDBxYxPoU6ylZGQ$8{O8@4Hx6&M z!{@F8mX^^AD_VG66MVMMG)`2eLenn>ea=QCIffZtz8i)z4g)8fAJ-#~N;}YWE7x|S zL$@3PXvpq#!6xM8);Rs05`j0Nlx6b=i=*6-2>_r9#txeJ3WyZh1}BQSaN(!lGeJAGkL|!6|NOY2)J!{=5m$g`3U>+c7^^!J5LAJ}!A$8;Djh(r1l!~<(%+%= z|CF@laG+Z;7qkkbVGpr2KW<}3xiOLr6IZL9s9w!;0)#P>Pl?uUP+MI@iR|2R*3*=^ z6Tt%IuyM4>*lG}5tr)8`CqqA z(DA(t``)2Dx5@)^)L`_G)-8rxBA^BTbB@CQ3gBQeUDwTC8thI1vFE=4P#`wh36iA5 z@jWj&WgIRARaY^b2y6_GSUtO|H28V6fldBy!P848-J9oszF#V$w!HyXm)KVQeW!LbP+;H{6U5xi}vTs z_K9SK>VYBK1vn>1oV=)@-M@*fS|H0aO?@zzF&Q3h~&mr3aMzh_ropg0~a6Y-o z^1F8b=bo8aA0o0Y!v1s%Hpax3hLLfEf5T}mf_zfm!|C){>K_5LDq}z75j;||v^Z07 zsCW~wx^R|sVCR@+eC=toeD=D;u98soO2qmiY7?H5w2#uJhz@ep07H?!3H5zw-)k7z zOAHoJ^M`su8n8&8r{IeL?4w1zI~bIR`TCI0cV7ME!&?Sg5nkj2Xz7)hjnUE`VT>hy z@K{^(dL?o?N#srz@x6j*>0RKvatloWkOCvje%Pe6_u2;0OJSqnuoHwZcw_;1#^jFD z1;~580RjRkQ3y%J2gVqpiIK_1y|@S&q56@-R*WGgRUgGAi#_#{N~opl10Pz1f!YDC z5JDazX~n}>=O7sCW+pWaHY7AskUpcCp9)Hp%k9KbUXVgGPFw3G#H+T-6n+Px+`a$E z8W%_vT`EJ!1DtLuH@6>3W1;mJVs-Q{`0efjM_hk6t@B#mJ*%O+%}$TvYKOI~+kk&w z-67X7mrJ(TTc681%D5&qT8F+oWbSdW-J$;NxySKD|FQ1MN;IiwcE?|&eX8=(VD@TB zs98bxG_dq$giDB!8#{2S85qD7$0%C7I?LHlH5^PZ*kY0VpLr9kfICAhMx)3Y--3 zG(FM!T#~G*{szX7#ah+4QkHrjL26|ck7NW=CPD0y8Pa5BLaCGU7UBJwz_ls^H{?^a zjH^Daq3Jpx%4Nc$tVCv7%ue{3+}QaZLDNOB&JHD{w!2MLQN&YMo*OgpB2|1f3sg}eU$rn6~(n~Ki0(!za=|S zP2(*ro5tWF(+>EZx_$Qi1y6qchnf&Lyw+&2S{wuqG#($b2w@?{t_W)#gkK9{T|T!w z*IE45Z5D8F?{T7;0CN40XyPw!cE|rd)cU^*ss6V`UoN@+KN)EJyEMMogB1Up(3}5? zlJ)=ntn1&U@$b@DhEu*cL07Mp^iy0)j*guv6HM0m8yG5CR0=|KoK&|m)}e{$2R;iv#xKzXd{pzrzt{Nl8@m6$?E5fFUQu^! zyEQwgUoT%HKlEEZbJuPRFJ5gnymjn1H9mZEq(%GlO%rtukq6Y%Ec2E4$9FH+lHr?v zaKn~Lz%Z>0+TAUPc-@736Mzj|3A0~}(fc2_9~4Hp&ixNXwte9Os5r6qNtQ{O7+ZR| zhj~L+Ugf(kuezfweVuv3xO}Nz!|dr{aha5bxD86eS*1PT`^aH8lA+&|b*NstGpStH zvS?`=Rp{DLpRKW3F+REJO2uFBD zjaO2?0DwvzL^9Ohyy)pVVre&_Fp$~GHefe0HTC{ny#DeH`1fvr1%(HTA@x|FOw9y>QBybo{N0EEd52%Q0z8J>pLMSP zayM|}yHa6HlKPnCW;ho{JiX+$udAY9P<%8>bG{%kKJ3+~dQ!QuLULtC>$@&eSF9-i zv4)GZm75aTSNaY&`fRL-&X>KXdJ7 zyCa&N;{i(ZlV1956KBdg6m00z4GHBR)^^fQr*b;`I-PkV5w~xZXjoJC^^&}yx{l++(iG{%q3NloQ@Bln?9^QP zK=2@$WH1sWMGKn>kH68*ZNTkZImO>0yy!O_**ak7^ig^&`o;?<|A%@yBC}f*&d*Ow zTaKm1Hg(h1@E2zqsThS4oLii0#0Ko#-vrWXZL5i{%MN%SUTo=W;E|JNZ$;J}jUUt< zFY8O;-bfOhU@0hRAvYa zY{%kw7xom7ho&E8CSXkS>pVv6$3RRk#47c{>kJ6L$veA}v;Ice>GM-$w!kOl%<;xP zgY{N&SjcC6im1+N-s_DQ+J3#UM7Y13^Dc}d1J1o7z8JKdEQh4!6n%Hs38EY3%viUF zrBYp}n-#$d8*^2hkLg522lrOHnct@Po}OOq;otEKl|5ZmI;=)XDgA*~z|S=T%8lKf zb;qO)4GH#L4!WL=q|&xcDq?pngX`BTDO$u#U;kCMJK1fX@(~4lm}5SOpYQ5%k4)7K zu#M6Rie(?3U2M9XSwpCgqKWnP<`2Brms`4ArY_jj{WdaSMa?4VrJ_~>OK}c0gc|xh zOEqrMP%J2{Qtt8EyCRvV%3jpvMlDeTJZY)AQl69?q8zTpef+hJ-qz=NOU^1~{7V)V zqetp;-sSa`>h}m~Ik)D~w++YQRBkOUj|Ri9u684>se^>`pVEu<=R4g6`$3d#IecpZ z>7@=wAOgu4SQR`YY12MHN=}!#z7nw1P|j9!J(ZuAe%uP&R5L-79E!b$kfQgVOAFl~ z+!2~E%Mcv&?0eu_J&oY{`SGxlo8XRo0O5o9$UnTU|D5;qrImIu8Q{&*qtf2?m!wvL zHW%;lXy(UO)IJ|?L1HzSP{#EDH6L{wnc;>7O z0$8$4ZgEPF~!H zQzjSi__<`x2)^sCYa-`L_LA>wG28KoUfUzfUSxq^jGC~yF{AxP=+e1OQq?=(bhzeS zBD@*lzA#ey(EJsTg4MdWCfHl*x2Ae$eKfYFPallQB8b=sxlPTF_Y!|B$rtHrDQUcD z_-6aQdQ;EjtwjNse^bWth}7`VHHyN05)bMS4Dik+9y_9OIzh`cFYkV(`+7|96zMN5 zM(af!NlndpdomLyZ%V9r#3DP6Gv~bb%5C%2Ci5JI;g@y3Cqla*lsez>X;1(2~XxPc26#C{!qn@P4&d5MyKltL=483D^wD3Poy3sRaWz+hQ4@g zdL{9s=hO5)YpqGE%c}4_wr+2-56|WHx9)zJcsewz<2ULpP=SlQcyGGj{6Uw8GpymJ zH+08osqy8rc;^0UnV^cvj4i-Fre*XC4+FZL3HTaNklQvPZZHeyshh5^PbBw_R|$iP z-+(K_LX6P(`S5;pB3R$|2006zm4%b1$Lyv5Hl@L`yFBPCzgu*^@$7kgUBrm?og)QB zS|MaFReM z%dyJ2EOX7WHha~Mrf8Cd1+JU!Nag&(Nqpw#AKVU<1{awidu~pkiGsO*!jzm7_@yJ_ zEXZO}fEuQ*?@b(eL0UuIS&OxtNJj<%jXRq#84~Az|CRHQjiGA|a#l(`l4Dxb9Jj|u ze)$ZCL(^^F?UkY2m#wlJ46d(AsisDW`+BBv2;w?6K7Z`QK^F91agS(?Y zlN47}mDd}6G6xpt@3}tJ^&D1!qw?is`A#jGgGI9peRQ+f(Y9$9altyr;5^E_tPZ`( zpdf82{voyQrws>*eKMtzrX!C#Z!Owl<%?(`)QpkJ%i_;6`cBM#lqby$@7Q!GkL%Zu z+sjYcb{0J3+1l~$bZgkbfSKO~w0P39yC-$$WMr>rKbfAUv;;}%I6&}J0_GjG~4&fCUcI% zH{$&tG*oCr?IYyxq`s-rI}oMM?5sX>I(6-OQjh1vFp+1EJ$sQcCbih1>>8Xt6(QdD zD<+rxrOjzA2^;~r^Y;6Q2D`dwT9)FShPU$d8w-*Zs555^*M2fd4_CDm-kkX|gx@^O zJBe7-K1UeF@iSA}j+DQ?oXu_*MhT$*`gZv3!!S+fdcE8mXPi!z`Gu(&nOU9B{p2pP zGJ3MjC3LTktaVWfPxhgfrd;(eAa?igRYfg6g1$$$14#jSsf>YURvZnaz^+0y3SYf< zEZuWU_C*eqVR&n^hMYJMmbWANbJW$@e$z#kHj~lFw6`##H)zZQ-=~llq;{Awj43Q> z%?qa;-)ih~9=>34yLz=lp)2Eojwph%GW1Pt6zDy{rcc>cng z=G=&zq5E+WX7;6P)%oWZ&rFI+e@fI^vvZru2tgMsDwV`BcQtvf3;RkxLO_fnVKHg9 zGP7seQ&PAL)tBV*v0)E2P1-^mdu+$qfCjdt%9M-zSM3eTmbh^Nkt2cc7jC-EKj6GK zbXTFVJCHAFqB>FpYooqr)z0)SuB{0p?>wv1{b?TAx~y}wf&#u657%n_w2~Aa^C2CU zP+G)|=W`BM)6Qaiwa88}6SwrEa?Mp%2od&ETpbP#7b}VA&R;6iQi$a)%%6L6Lt{rQ zHf&%l&cia3TtRwyuI|CsoI(Y93W;+uz^zSpK6v6&w7;vrXlgk}XIdqbhMMcUj!T^( z2i%sI9h6+3@%VX#DF~d*(gPhXr3Q#~6ggRIq1t?WZ>;Cy-s^Ujk%=kO%^Uha@FGlD zO?nks`N~)ho%kvzzMy!WOJILGKTf{bevvrXU|(k}DqVP%wY{-D=XIfo{m{+r3XXnJ zDS|%7(n}6Z6$j={id{D~a4Eh)6$tWg*KF)dUX-J)vfq06j`3n*{RJhlIEQ<$*Tk7p z^Ud4KM>ix&PnpgoAeDu?eM~xPDh_uA6;(im*HRaM%-Eh6CzX1P6zb7gI%4!#P=H;9E`ci5Fz)CaOs`{M>qg8V9Ov_u|SC{e@ z*bJQYtPKfY8~%Uskyi4=e%T%U{R*J?143H!5A}u&Icr`kg6h7w+*hx=Uxfgfp=%bR z4Btf2tJ3`M-`kh>@Y)11_nn?ghB17TpG&(X{`yV+@rO$oM9V8Uckk=OnB^~f zuYZ{3dytGkM172(X?OAUHd;s%qJ%R literal 0 HcmV?d00001 diff --git a/docs/components/identity/img/create-user-tab.png b/docs/components/identity/img/create-user-tab.png new file mode 100644 index 0000000000000000000000000000000000000000..c67edf864e0e030c1b9328d79cc76fafc3c11829 GIT binary patch literal 30281 zcmeIbcUV+;vo(sC#fSouMMhDgvluS#I z9J|RmXK2E$?YyJD=j=J>uXFGH&NuTs%=EB(ckf@STD59b@%YMRrG0xC_E1nz?7Q&$ z`D+vu+i?^Wl-qahfZtdSD1=f_Y|%59m%nmBUjEn>Tdaw>r7;D?si#&?K6A-$VJeqR zHIIJ$gejIr+~4HXfYDSG&4T3-Yb-YPLz^Dea1xIz@^SrrxIahyy`tN#xxex@m$HY41(_>D9uY zA1X-Ct~$Y#K@4ckjL;8@j%(|!DGGQt6+koVITZSlhqiX~4Qu_Dt}}Ms(^PTV;>Cly zJuKHFsAW>bulBvE{>Gqx!<4qzXWIWxOhlu>m%uLtX7?h^y8Rp9Z!Fwf&*zBH^Ley* zaY<11{z1K~K{h9k%HKLGu#LJ5c{tS-IgSw&Qf~7qw9A$W*CUIYNqsKFc7rJffGjjgYXU*I{#kbtL z!+LI@D1}IcR}&8+FWq^$v28-yC{xqy>;af?bz_YSCMqfvobY-V#g>QW6x-m{7WiR+ z9}0@C&%7yi!hfmZ=X@09Ust!|qPG6^nsPhx#iP;=N^rH8AFNwz`AdLLucW0WYnL?Qb1(wz9OglW>+k{{0;i@EZ9w z-|=JL-(qheeOyE3$}xGYt?@At-ZQ*sj?3&hcI=pxt&xeuweyPqx*h&c`nZ|B{T&HD zJ|`z9UME3btgR^@zqq(K-x&cu0RbL(2albLwf!w;9&0=HKR@KJ&pB^wXJ~7F$KD)k zeGK{BTLxGMd+FoHkuUo3&!5j}>}>w?o2>2rH7pn)A996{pZ5&kkI#l%rI6oBTrqbx zw$watZUxf=-ytK+FDmu@{r~C8&u{$YPK}>;@(Z02`1RIbF8#+_)$ELI<*`=qo%S+6 zm*!tL|9bIXH%jp#L;qze{+#FUzlDjG*(1gGW6@;x%;g^7rJ#_bxN!dL4d*T6T`sM< z4Q;a1l7_?FsiVHW_o`3G?Rd_MDhk!F3i9rU_>?t@e29EqhC9vBc;$u)&qbA{ zS3}7@+tki;3Q<3P($nIa-y-f#y_=(0TwHZlv&A7IwU%g+l)q>y>*=24(3M*qb@txL zhl+P8woq={b?}(nzr9FMkFtsj&whOPKm7jBcgh_)IKQfdeu<0j;C#mHPP5hj{Gsq0 zxR3S!&HKzYHMecuxqmIbIN%Wa_cCwaaezgqVOV{>x#Znpw7J;!3L{t7kyl&x^*>D$ zGR7;wJQ_JV`kxx-1j%L2=2FkHI5b|p+SW2mzU^Em=`!2D zOeSrzFiY4!ija0y?8u;{5nX+q%Yrs=L5?fCZMkk?1Da-hLHe?hu zxn!AAdD5oCDzkbfI|OB-U>qjrqu97`JNGjkrGH0so2yPPW3ad}uoekBu~#aJ*$2O>vm?S^{4o zllWo>wvd@CDbLn2tH(RJ`wuGhK#YjY#&VzY{5K_K(&cc8(pMIV^k8Nk2kxwF^s#Op zJs>@QrOjjTrD>Iz{#q~HTh&OJCJ$Ek`KxOywVnZ{k?tb2T4t{W6l=(H?TpyGt2LFb zm2+Adl9O5NIZjg>r-Snp^|*>>d{pq+AvsL~F}n|+Jg+yTtiO6KKCS*DzsK6LbN^GN zH%?Q;X#288!&Ma&TT(Q?UCTR<=U$gM^I}GaeS?bXD`J{xyV=_j=8rC$#=*Mk=bH1r zDbVT8UmtQ9Z%w}cexhTO!;a{=x!y-~o$}vYP1^Lqx{qnk`0B5{x&JJvd&y6*=Fybr zCi&@t2MJawYi*X$mot{g)yG}1+}mW4w>laZ%~bq^P2OO*?zIhpC$mHiqf3*NH+#`C zwOZucdzH|7(ag>H7}=l+jz~8F>ztAI6$c&05;A$o0yk=&9WGoO;8XtOMsi;&T^WjG zohsb)cy~3|apGf37>*so&uU+HHhChW1AmQ%ClH%GfakaEudt0z@tp4d9PR1dTI{`# zYsqmS2!lW4{2?0u(cV{UNXWV~Yk5g9U~l#uak14f(BM;>NvHy0=Hu25w3B%A6=egJ zON%x(|CzAKj#n=YHzIU-=C zb7RxNKhASmT>i-X z1g{6{*j`|=`^s;;#x2V)skI|lv(ULk*UA6-W$_b(q1Xavn9$x&#rwJDI&R+ES7mHs za+%&}$fuWy3o|#Ugl1}QmTh~#)SHfvb2YUrX=})xJc~`ts&0BmuT}FqeEHHv6%sz~ za;jf(B}XJvHbc7S=0;NwZgE^weVGL}{MvZCpT_s|uM-{0 zgQ3RcA;u_c@Rh}TF*}n%A)DS3>Svic;?kv29{&-wAkJd?C1oVtpa*fLmdTCwKt_1! zob1wk{8LFms|Pgd%Qwuu;>$xn&y+D@*FLaiw%?9R85OY@SJ&E+7xW}E1^dz%f0~>! zevXG{jO;j4Z|sB151LD1DvrJS_D#y|>=aLv!nuf!3@dH*1sT{w(K0h>Wv^a}8?WqO zn@SU!K$+3H)$OANZ$y<(_7h5FR{EdAaVX|~Y+T)CDZ4QfsJz?z!%o7p9Z7{7IESU3 ztZoMjSDTW06LTjyjTvVLOxkQc6L<)x`(5Y{s&>srqznkhIJk{&L@r5|FITF1T$|*> zEbx9RqC9bPV^FkElZW-Gp^)w6NKw=B-6)e2GDo>@H!jsuuK88?H;Me~b2n~Ju{d{o zMY|O@md`nPzikt^-v#EN7wbvZUa1k-*OlwUSH54Y`|hkRA(DIG3E$J)Hz4Q~~W3WYYD~=QBpKMM#75cJnOg}U}F}Ir|?25O=e3;2R%RC2)(~e4}bU1(` zFHSJh>D)PMBl`kn zWfnW_YAbT`=$8jOO&u;bmGa{UZZ=vONp1sN zPfzUMSn}Ky&2bo`Mf_~uY!%l`C~57ax~@Z$Go0IAI5~b3nWTdG+S$ErEN;`EsmB*b z8e+g=Rj$;hdu`o`pFJFEm7&@1+v%}MCY8fh>JZypn)GW2;qWSCvbk)a>s%?h8%H-xL`YqBrAf%zb=U&!YG? zxi~trxv7JWv-6Y3i>uq3X15zWWOmdry6~V%`75o?ozK^5dMelhx!KGHw6rag724Lo zD{Hg~mo7D^$}&G>vi&^|wzRQlOQNn}@jg*M#B|bX8a=&D0vG)DenqyAXvZ^UUix4? zoVg!^FlT`HU`R##XZnxoT9bq;!Wb%6*YRZjn?-kRPYs1`83&Ko`!-O9)2{lHg#6fE zBiW>UnBi|p`i0a&rX=pGPv*_rQg(`ne5YPMP600#qD~kyu6z_fmfLtuSp^&oS>Py(guR)|2kk`ah^P41R(Ok} zl8%<#nVq(g+Eb#%!(mR|4UrBBnlBstzUu3v#Tg8IS1jtZm+JRjC*gMFawVkIH|Cm- zI_-#xr1@ho$|ZlVx~Y-{Oe}Zd+N_}P4ZKxs<5+_6-FT(2fs-;x)m33KSW8qxWyVa| zptqw#V$d3oc0|F-W4D}5^4yB{P`lD>A(Y_qy!&1iWxG(oeVb?}Y1=>d{WC9UA<2KS zU%Ya5=7W_mbX)Fuc>T;o3W0Y9(B7rw+5@N?^I(WLa)+QOk11;CeOE4la>8OlBgq5c zt1l9n%uMD^m0jdYIP#Fy!(ZZGL@Ah&7oG{PHOCbk~ zA07yNe3+wb%TA_)rr{3i;+u%IMFJBK@&sL6V$SUmSp+J(0S-Yzs}jKX%+k2|Q{}UH z#(2$>9&@3j5=tuWgGx*`=OH|#vRPkfDd&ufr(R!O@U`yB2`WH9d>Dj!GYINkogX>8 zPF~_`;oP~-hT`b&7BNwW^l{<%a>r9z&11rQKgK2c6u6ViAd=EOrRO@4zC3~TWQ>XQ zz=heA(a(UXF4=lO>Pmod+rz!C5R1;V-i}MCD%h*PITPqvB0dy${alYSZ}z*3I6$L# z55z3*cE*C+8%>ttlOG%}9KdUr0kvh&^MEd3u2!~iK6@y_wQ32X3~KnXWdfHqL(tz4 zK=5%zwgswv32C6TlNzq3SOC}%0MIok$^p>hsgv}dtn(L|zolEW3={KR#TSQUH?v36 zYb3@>L^>=FBf-ECvV`OKQTS+=yp_RFe#h}vTkf%KNts04)AEc~17BwdWIqn|mqDzg z9bjx07UwD2d8c@|Guw`SXe1_**FDl@@Ffy)uJrr#Fr^N-y+2xqzMF)uL`_CBO4tt{ zq#w+%)O399PTtJ5$6pm2cyYbghb!?>lIQwZa`Ar27f&2Y9v!lQP%0=W*Tp*EDVH-B z52o>QS9`{KVP}p?sK~cy<=~^D);eEhH`h+gSJM<}K4U8;<#`a)#rd{&hG8QjtzJK% z{aElj@6cT1b=4r6{2)6Hl~+erK7{GFO@*SJ8cP2ov95KY3y%8W#IG@mV!4$CjdZ*A z-b@|XLu8Zpeu2wfafj%ntVVK5XLNotxtt{#!m%Ka)LD*lT?oJpBi$DtUwx}s`b~*d zy1012y`Qre24m@6>p+QWzei7B0Z)|gx)cEML~eXybx@io_4h%mM(X|mn4LGu)msnoB@sIYWLYnj=sBF_n(UMv{SGe$fH*v;Br=;rGx)JA1UL0G1d*RRvB;Z__et! znq1CHT~2`;>*Vq`zPwtLBUL&UEa#O_pQQ0@RCVFjx=n2XN&nA4qKNtD3uba*zL-dN z#D_~d5Y%!F%luvrCc9nL#^Wkhvs3GB{g^D&%PU8e9L zcK?^Vb+5&Ru+8CbZ^y**lF`DqV|9&`x;ggd6>IUsR=ZMtQ6ju!a#0>Ym9DliyhJ^f z`+&I@x!m%9>3<0gH+gyQ+J$5MGJYI&@*%qSQ72;IFtEb4%@wGl zF?$4~Vf)H^4s{|{fdU^hwJ<^*jnH|>6&y67L-mDn>o5@uslo!NqhUB+H-B~tanrT3 zn{G7UnKuX}a#qPf7`?|+ZbOpaiAvxgS)GV3rVAR@I=GQ&#A=qdTO=`;v$$INF^VSQ z)}F}ke~j=$Hj8bhnWSPzI*|`yg8>lW}iovAigJY0WRd@YTjLV-V4;UufHf! zEQ5#}1B^js@a6vQratjO716F6gDK5g7Nw6lB91=iPz|`QDlOcs@3}5EUng$}2%>2t z8=+J28}6&~kMoy^l0@e||I-0vv_Or*tCreqHA?heXR=|r`qZt)*sC+EV@ViKR;Nyz zWME=SA*^KC$>Mxd$F}lBQ}+Tqrf*zQfkX{B{glmWQIg-dzIjr?>g_NXKEK=Y^fJI8 zJ;$NNeWINQ!IkI%y;}I_5WC`wV_CK}QyxpX&VT`WfoltduvAfxy?E#%fnRWV9e@PW zy`2XF{tWQA;y<0!fp;QQs#u?&AZHglnH507z#LHRGI(9bwpP1Z>A0mU6J}^Z*cQr$ zLuRt!>j@@K-UUeH$(>w6J&+10M13eC&Q7p(0!WlLr?33wC5|0dbmgp`ZuY>1jT4#* zNMzy?f(0-Ivq33)#4^cCQ>>foq)q1RXPH(V8OhZm9WSnAU5~l!BIXE8V#T!6T(u}) z;aqKI;rax%j46ft=K50kr(4BU4s#lb%j>|uFdpW(?1umrn)2L<4DE%ry@7(K3Lwyq z>#>W7K{f9;ag+%%!_`rXNR)hblvdmF5X?F*yJhb+!JF>GuOC+J>Fj)Y;)sAwwOX1* ze6r$5=2rp2iz&P(f}logfz#kenBt0{lCB&FuAx9Cae)Yr)sYlg4AamQK7pEYs9+#i zUxo-fd$b3F(NZvR1aZKej{v-#o|VLq)!V;N@vVKB-5+FFfO?kCq{}q~TZiDjT;JUI z7U=OE4(Ba2Yd>9ZBQK0$a*Q6|*Ll$KTK=I~!+RA#PMz!lV#k3#msvQ|upT~?W~r$v ziWw(@gFX?zK3#l3n`NWXQ7_jx6qgrf>RlToKDY$FmRgg9L1FOZ?#l5{suaEv#bla1 z(l)0jW?0fcGnsxB89(ry1Zw)EIpzrLInRkhoY9Q4dBCNR7X>{#qF`En|1;$>0MyscjaEHQl_;+gLmhL7=(hJdiS757@_?*VDtKr4HH1Gp zal(D63lnaf_`VCs*f`_;NbX^{HQA6Guw}GrGhmobI|5amtx~}!9?W{p#Zb?UmAGhz z6shxg?~ow8T^_>IhdU8Z7w0XuTO>EBYnKA)c!sN3A{fO?db#`_HFA&0?AXdCvpW1% z17KMnBWYQ2e!MMp)mg%6l4)f&-7Qo+)y9CZ1EK_0`0li zTS}@6H0#+cdIkxNCKy*hQHDS z5}t#;P0d1U<74wKd{@T4y)C!r!w=BT3QB4>Z-$5SSnQ*6F^!2$MscfOB`H<(b8Zn` zj!eElnc^*!g5bo$#YNFW!YFg_7%Fq8E}?s|fA0Mya|3hL-ePwWiF&0Uii)86*jHNJ z%YA{^inUROd6ChR495r1@r>EEEzyjx=0AtfqJGS6NX<8MMzf+`e02jLz`FxwX(+n^ zHwq?uC1b9ya3OnvU>B9FY4w_ht#}9P<_wP6U53K@ zf(zG-nLO8K8klAPR0OPj6(zYL@TWwyV8*{53rN#=b9tt(Z>F3z5J9Sr5NnG;dfpI- zjhU_~4^fdW`-Xa_`ga%jjVhjGO%;&e7?uYhth)x7gZD1dlIXBPbhnU^!W4p@flShq z0_Pc-0tp?RwS^>4f9|0(ce;y~;UzOm zppzd0uLZiR9U<5K!osN4wehM_Dfqv`>`DRL+?st&C*BzU4YiIj@ey#JS_OZhxq#HSp!3)n6aQ7*?JL=61(unMc>l zV%AM^0p%HHb~*YkPIQ#-;fgo}`T96q0c7ZG5C#Z>3ynXzAu*ndvs4rj zm|sT_9)RY^rw#KbP~*usy5(BiwjG^S^~!wAAk1+4kgJ{D3F?VM%G}B4ce~h;AZxEC zE+kKaxa6fl`km$}X5rh7d;MPvqFQXNw{r6Lh}+r$=d%+yZ?q!;QkC#p_fFYIteeZ_ z$(1KVOCScLUwM{6Z=O4uV<82w%LYi_awNHbQLLX+-yhY&+2zWGp1rq2WyLX#)=3I> z6K&yW?#pyXIzURA1r-2<+4ZOKe8vsv-r&`r+O+x5ll#J%*|0>LU|!wZIX380voo2y zg!1f*J1K``&_9hEjG~DP^&on1_VUQV`I_It{^m*kH{NR|`+TU$z8x09Vl)O_`8TNO z#jBem)SvMW;qv`BkNz(tTtEs&jo7^L!p)6jU_eS=nnuvGdMw|f8CqW=1#a28qXe{J zhappe=>$9x=&Yw6fk3-jM@j1^n%zV{YODzK?K9a93K z)fH(DQQrLd`c{xV833mn0O6oW8K?$IZDi4p=_N`P*7@(o5uBXD=Ege0DW9mYq8~&g zMc-0QYpJ^@fwHjy3R}s$uO!@tIA~G{}L1KsMQIf zqD`N_sCwiDy|K}_qyR)@z?pid}5 zvT6@maHsTu?McCcul<&&n_Cf73ZzEakv>#)0fm>zK{J}OSmoFZs~Da8Zj;$VWeY9( ztc=!Kx42U(jw7TIzDqV;dSS(?J?+C{<@dY@qR*__Sd-~}#Qw&0X|l;foC%EKowJzAX57FHWjcS9pf z&(Q6;lr5DJ)OFK4iCNOo&xz!o`PB_*wrIcN_)f)UiW;>qK|!Ap+0{7wD^=i~9V#li zg7H$%za(riwEyUtV*!95z*%iKm?@=0Xtc7cO3XBx1js_Rgx|`$w_oCv$8s^NBB{V# znTG_^Sq7&^ytq%y3)LU`Q=18z)kRe{qe|ZbGOmWq;x;)zz>7 zIAA<+xLk*^MR93nR7SZdZF`RWh`_{F;Ynsh0U@ou;6top9;9lXRj^D=HO?olnW4uG zj$Z1zZ!_C$s?kFde^984oNE(CU9T%j5Ogrx>_d}SQg|sM{P^o}2GsA3eG3s*K$bV^ zXyn)-$oIeExDOR7H(rG}NJ&Q?ZOP@L4uMlwJe7+o4%#+)3W7fN#Mh|HT(=8G!~Q}S z9m+cZ9B4k&f}W=_yAPu|RF#N+RweeNCH1x1G;5kR**P1cKlX?10ifja{+g6{7W>xv z4coQ9;o48qT*-O;Ph|St`Tj#X{AE+3{`Zj%W(#Mh`YWIJf%4O5t;P`{_A8#UTjYEG z4N)|@y}gCJA2{5k5HTBrG%IrCrIq`KFFyi)y&A7P)EX$e;cS`qP4OF$;#t6yzl8uV zx#GC*SNzOA^t6@<9g?u8K!W^vz{I??6CIg>tPlh_(04?k8a1j2)l5p@z$snIBfy4wOb2yO7T*Jk7O*gmU(qx{E_Ou{U^jGObqMM%_~m74o1Xao85av+5JAd%oV z6zM5bBSRji9^8NoQQ{&ZH2fZ-e-GPX%7Se71>M8u%_tf-h@yX;xR-bQu=GS)!^b#m zs`^wZoxaWkJ*)JlH_E}h$)JfWME<@wXn0nMR#tK0|)cEY%7HQU)-p+)*(7fUg9ya#b8;qY-bUqQZM0qk5HS zeD>h0xluto66#WfoQq;RJ9PvT_Lvo5!l?nK%VItEHB4R_U+gA>=Deol_sf67KycJO zVaQLd!l%30IZQ!3t?P{gSZM0-`w*(-zL|K)tip#FpA?$z0xFWh#nGm?**UvHIsjG6 zqnJX5tvmLf8ekS_GkTr{oQAUa!zPTryU*O*5~y2PV!~`M+D{SPeGE~x+j2LpkNgD? zk^yX7o~mPNlLgs65J2*2SkeCGJu*L*q(Raw(nWAT>N{`h z9a&bDe&8}Q*@aFA3{q}6JEb#yunSegFqd&R%8BT)F&XifIr_ac!2BAj4aGW(?s9o1@KX`{lGUKG`i*tmTDJnXkut;63v^3PyvLn`z&uyg|k0^s@Y0xS>?HZAo=@~=X2pAo9ME+hPJ zbPI5>8U+|lCT09%b zFqeVEPvkIr?doapB)XO$u}hVCatIBBn+YS?v>rs^fMoBteMIv9VIY~C0ll=k7YXvv zN6*}pi%+eQNN&+{E#=AVye2IID!f*cP^(_hn)&S$X+2i3n4VNB+@f<>lXz@vn~s<3 ze-o@@q&E(hXzbhfpK8S; zA=`VRRSy(*gxiCl{?oTs@F!j5ZMWk#SBn6q&q)Fl0^z)|LDZu zn*0zG!65Cr$h~FqvgE`OsJ5^-T83#Xc{~Gpk}}YyXnpD6j(c);5Q>3x&h<20mgGrk zJR6;NHsX0p4pPmuau1Pe#y3h&X7$ZpF^BR)z1I}3;WX;O-q>>NHc z#3b-ldN}G{FH%&zJLt?jT?L>`8`hDwd#AhIr~C97PJ zoa&_rsccJq`)>-y1Jj5AW!4o6>o~dI&JpVcv=iUK-EH4<{NpChov@zNdxjjniQfgs zeFxA$R;qrK+O~WieQSKr5Quwpf+~vUVC{W_^*yrVPccKWs2`Jf3QkH?D2xa<=W&0?h#{urQ~&+*9r4qj})!3@jza1K*Ui z(ia`9#~Fv?gI|s&Lk;DNn;9vFpc;;|#N!I-*D}HkYqAG8yT-wQECq`jy?n5rS>lCj z#J4EXp{FM}v?79E+h?RzOp6h8Z)g?V;mx;ousJboCB779T5}>l#rRaX;ZW!Hd>REb zcxF;47q<(iO?32r$kPEs)UMiTqY-t1=Wn|t}1-l*;+A3q}bAh^6$^yhp%uy>z;+7Po-C%%er|Ek@UvhGHY(H4o(}O>Pa!yc;$d& zh5GE#5W$qEJ(dN#5>q~kC|}A0+ugwYX5eD)xIJiaUXbI$p3GI((`dSiVFXPdKaN)p zgN^Ql)ICm16qEKg1w&2aauufFns^s#1fp`R?jvSiU2i#v?+hU*Bb(EqyU5E1Qi?&r zA;ypI(_0}Wa%TnHhqwejNji-=(*W?>ml>Sl?U#NZ83TA@zn2$Q1IL2 z5#+Bk5IQuZ+#v7*5_h1!cV95R6XcQZVOrgRl=d1o*(Ay!mCppKPTSHuiN8hUSb_A& z20kt5&N5Wo1?)|n0>-<7T!EjH0Ir#x9DOTMP6mEgl?;mgPkFICWApD7nupgxildkC zSzBU7{s&z^z{K;va)8;hBA5je^LrmUKy#?}rF*YZ3-HS+xJ>Fr zlTVTfcD8;tfpK`SV8dkmh;Q7cBFHbOck+tb8xQ2EcdeMS{h4i%w84wIcOIWeC2QhQa~ zpL6gtaPacp{T1lt;xsLtQ_A#4yS@L0w+wksX*JYes*A3*-)5oLD4)+&7 zkje|8kb^usTC5{?GXOLiL#GOT(PPkN(43@Nn{7iwp1ZzYg@*vB7ZwlNdO_t!0h^OXOH}4n(QgM&|Bayc`JPilxG+6Y0ex+gUG2qUQj1=BWweb0jeq8C72WZQ}adIo3Pdup@a>$I~? zfQmC{Qp50^IA}`(Dzy)!D}f+Dk%mwv?I^#&`DhCyG5R#lYYBQmWC4;i1o_ZFE6AyP z5eX}zx3{Ukz=7yv53+i$*&uxuu7|lo5Qp&`T0}CA(wj&bHK=LDJyshc%aAgmi576c z&Y-(D1b;mP5_@T+D3AWy6x0UVeA&(MV(f+_YPX5Ia?f`O2@O|&T70U+@)$U?{7w(= zY;CJ_HALhOkwRb=)RPf5DxY(dZ>Q5ah%jk70LGJxD5*+9_zkO)3B0-7j_u|#SAZ?5k8Bz^r^T^s`L{lJ`WawNt`9Q~JL^QdaGc4%YQyrGYj5joIL2h|2L}HzW!+ zR>x*QjCBGj>PJf4UaAH}-oknpA;nSAaadH7D&#LG{|6DtlLLdRsXiG1RniFmNBIfK z730PdFn_f3WV9Y<0X{TE_8w7HX64*W>#LIbpO~h@mN#Fo z3?Yk)nrADjH%In~kpec;y2}8x%rB4kSCd%vs=JEH!_ zYg=b855En(sOdeHR44-q2#oq@VtTWdv1ddu+a!ql2%JRWW({^cRDWD66y4gp*DEyv zXsPHt`4f2v>M{gV;jd#Zm4N5+ngRr7+a)DqKU`<-kcw^y>~2J{MKiv4dZ@YSSQm9R zT1q~#s9JyuSRt#^<

      pDBA>b;RS^#ra3XA{dTmswf7gK9l+`IGq=9n7XwP=W3lP6 zu+P?s$7=9}4}pZ&8^jl;UMdDs;OI`KJ93)0!oD{u3VHax4GETkaX)MTRhB$_c7!vU z=-SiN-DxXMbrLSP=d1At?Quh2hc}>F7atrqK&X9h&7)t@JgZS~#|pIm4LsR(DN|_~ zP-l7LqKMJ7wlaaPVz-OM)B1-fw$iKZ^cjcBjuC%pCCvQbJH+NT>~WdXc(|XriX&4y z!_B;XesnZrTr_{etxY?D4I9ALA0F`zwE>3Ey&|TBZykFn27k5eKcJgeGaxss3Dvqa zR3dr^u-V*NAvB^yfs9(YkT_14Jv)a6MQ=tx>$sY^O-c$>=5GR!X!FLl>PWQVyXXPd ztlgxdKsz&0=>T!H$%lnJ(Vl701@NNOCLaZ=Kl|?n+um~hW{)mM%YTvSCg$d-$Pbz- z{8zrP(uesXPm0IJvDEB=PIa&q#pH2Ve| z`O#)!*H;gihH+8h<3ASq*B1FRBLo<{}b86n;2_wjqwyT>+hee6}unKe<$W zSU9qZ|L>@??+sx9W7UKK%2wKSFk~HeL>u<@dDQU;Au9YU)^up+Fe-hw6p$k`Z&}x4 zKg941TRkfm1XF@E(t2ei@*YLjaFa+~aYj@Y%I&dLP6Lx%Y*PRuZnQPMAWekYs?T-5 z12(q+X#!>lF@D6(DIyO_+Xcp#ix&DYtv zB+lV=H+E^XLl8pP#>wR%*d4C^L|dGwWt}^sEXrhC!Da*0Z7H-)%11Z_YRLGhLZmLK zMuK)`vOD%3JvbJhdU+fXa)Xb(5jaqWs9J&M=P_7l!tj+NwoO_l-*Dw72(~6~7hal& z%3+Q5br83n=WU7*GQZXqe1fiEeFCclwaEs61^n4|feQE| zl2dth*)a%j1l*#4clT;3Oxj0Ej$gC83qa) z(+6a@+Wc4xAJF!B)QK#2incUK$}Tise`{JBVN)&K@?v@cJW9Y`&s2YA$&C9&^q)Y! zmw;rJUnI*+X)H~4edpil**A^ET!APrhvGY(MR1eX`Jrc-0<>}J11(n|(t2nHRNm4^ z7DU55ItYkiP8&rq!wwG6^RvtAh%^lbbk6kib#4RTVGC8)|Ya0W-s^EBIm^+&ryC zVz!ACRGlL-#-Q$uYsyQI(B-j{1Sq7u>9(BBunYy4zzes&9Vgsf2H~84n0&_GfO3CE zI-~&u9DWRT%WC_EiXX<$V=S0-_CCmO4pa)R(=&O*Wd>N}$MNEZpDAhrCLo5F?` zt2FtK)py(4_Z&+3Wc$|RU1DD<<^b7wbaVrWF~jZZM0A&N|^uV$(`# zwc{CP2MfYn@vma<=VfCdhgHjm%JN9;>8EObZygkrPd{kV9qOI}J+Bgsmn9dH#n*Fz zh`!G5-b1DTC{SiKcDyDiMe`Ng*0#OQ<$`h2p(*+H?KHfa`e&LEF*(4HAw)GTDS3fjwvU2|-;ifQ#VB+4f*8%CN zQPGrx^bzZWNQ6h&mdkz46_Q2V3+}0^i`A;p@Qgaip*=J52c&PP&zZP)A*5OGN8^=8 z@!vwNMxujxqnS7j2b}=xtv6VJB-0rI*VmaM00JE;Tt{`LGL-bKgQJ~zK0Sgv{q!Kh z^0Hx13@6lDn$*T793RdH)L%vQ)i!AS0iE7as8@dsD37ZhxcTf=BtgK#fbg-#Oq@b1 zQM091nl)@45IG&yU#$B}omOFXifEGl>5eDsND*un*fn;G zaTAbpW>Y%@4CgA0Sulk(7f;{d?Y_OvbI~@C^sG(GX-BJ)l4IWXKCu$8_9Q{o+SDT? z&JDJ(d$m?*=D7w=y)wM6eatbwqj~2^oJ2ln3@0sfT+mISjFVP=_>XMDW!mM9gd1^9 zeobZ#oMI=poYrILi+0|9LG7bKSe5;&sOOK;#SU5h#-E_YVb;W8e9A}kiSL&V_r+?0 z>s`D3z7cjQt~En1d&1nEBD>rd=kh$mR%!xG8U1@tSisYkkIGnJA>Fv2A6knV#Dh}9 zVdjtQBgbn)MX?i!GAKUmSREB*!ZFbYISC)T(z>)BiZWv#6z1O{vlJSMKx;ll3`XVk zNV$1OczfPF7s*_`(c^^$Vx2Xf^~Amn@Yzm9dxX!BkYeetoS>D?iP-DkZ&{mK4O9h{ z&K&ua*p(xh;Yga4i5Yu0N`g=+J9c9t5j&!Sx5y^ujDEb9Z*lco2kzOeV()a3mSt%WqVmcU8~O8{ z6H=czxtBL*RpMmcxxVx1-Df_+#5U#qXhiuxqmu4Es&@{~lHPeEKBrsPvw9}WS=*Ef z&kfuoLec3Fz8mD>z~M`1mUCCy_G=X#BrSL+L_h_FFI`zs-!>mx6vdMN3LR?Qm5T(d zMGouShmN&U0TM+l*bAe7ayFpv+R83;vPBx2_fBZ4{!In+|7TyjchXmK(xIlVAj{ts z&Bw~!l-m1Nb5>@6ptV)@$^)1&7*BluyMfEGB{eiDIPe;AUeAZxa1r=qU0!Yn+ zjpq29TR~vkpLX;J>eVV(DuVXNh5x*X?oxPN1Zc}8&a(r((sLHpaaJ9Ns$YtF1{W`0 z_C1T{M&zRMV3G5JB2Wht`wlMtGt^xN|5?>PBSg;A|7_sz$Mc`F`rWwx51OT-?#Y}0 z7U`VaUt96VrWHX)3%Z8^q?md`A+eust82H8?M)}8j`ADx89bKgmJSbgQ0sE&Su~g; z7X?yFEA3YF`fwg#Lej%T?xD#Z?#gKcbCB@~-7sr`*|re3+JRmJ0@Bb-t6P6l3XfD& z*tYL|g~DHLp|k>$q~puqbQ?ep=|CF25UQ7HhgryY@HbWe*PwQUU@mC(b7Ft-3u!P5 zR#e)*{N|^Fjg5w(;2TW-rT_#yTL*2%4;T9Diz~`76rPysD0GBE3x6Ks?-z8d#4u9O z!vxs$sRydo>R@b~T;y+IAnC?_?*jzQ44o0O03jlv4{bT5Yo-|;7=aSM6mo{mq&9-t zmyU14KcKYw$MbyT`gB!~#b##aP`O`?!59x@CPWO{3x#`4`R0is4es7nhi3>axG9#z zADyu3Jh$QU-z*`CA!zO{g0$|=f}BY&M7H0X)O{Bd;ulyisQwVw*I~DB%=B_Ec1ZhT zFJntIN!I;67VMJ+LcYaIWBE!O`D^W%@X4tG;$cVQe=U#PCiO5BGTHQ%l|t{OBdI3U zoc&0#8qzcn>7)M5OvuL_p`M|w?RJGy?4JAAkAjxa<>h%Ilu|Ksgxg=cy4?-w`UDS2 z3mRyDXkSlT-Vg|FVFaPUO-d`soBE)zED#tK!NIRDuQQR5cF(f}zQ7}5F?Jw{FFS6p z=brLQB~sTeKWQO@(ipb=l{o4>E;& zn?z^r_CH!)HP;+ZRW9kwTV0AHnU@eYTgD|%)!s>3Zr~2syiw9?d}wp+x#C*!f#Wh7 z^fr}r>;LZTrpO8p{UDQstu)1oncZw~C!%kqw%Xi%%ZO zG6a<>tVnB55R;5;Cbm{z?0+4q(78;f={DK@NN92-mC>eaYeGaXe+#tMmzVoGz{rx5PJJnO>M?GQkQ2M{GB-t+`XO^%ITFv zxYwlW$)mPK>Fd$R(lSQjq&vNb4(%ND#Ba2bL=Dz-{lz9yHJPM8x{T{b_+<@|*a!1j zN|T2?n>sfWQd3(!2#;$0ElLKQ2AfKiOlJmaMFJDn?K)l`a-GT>B)U8Kx7z-0M|xm5 zXJJKS(?8%Z=6R8QquVKEIYEC(pVTVpN)(>z|4|z)r%yG1TVd+cEte5_A~X)o=Z&;z z`lx0Df8C&rJS9qCvxdm_dxbybv;q(zpV$;c{QhuQlUgs+WOIbwId|w-%xE`zpp*bD zua3rzmG}FRcA^ODP+IUdK!TH&N9zbujcYRrsXSJs?P-|XY^6fC_W1nILNz&2%3Lef zYGP`1x<+&`Mr(Ylg?rWgV(Eh`(lK9-?670oqPO$v z?`3FvzRQE@U=LXWS+w_oRCo9ij@`pGliNge^R4#yi=-AZ$3um2Cp~teHp5I@o`Li7 zC&e(=OSGFWlIZeY^QfJU;q0Ls65aG)Hz6|&4YZ6~kB{hC$WD0^^?zg+ydr3Zo1&an zW(V~X?(KB)3^gX;OF@)HYyR@Vjn`yIA(p}J$&?sYDc9y4hV9Jf!YGV~U>XBh4khdAMTeg2VxFzlO@F%LqCA%z=3t*&J}GI$e>{n)CdGj( zpd(*`gc~;XUtSc~9M7}Td$2aADD@)AFJrVtb859LA~9=m&e4O;^@sIby%M%{~SyQ3B7a%U~}4a8k>{iqy!#b0FE)xZsHgIA9>DH`VmOKV*LWQ5q2|k-^5Jc7)F@_mKYbjg4p7 ze5U*}^N;v3LOu()7SY9h*?|Q=zSNz)F77OL&&^0+C*Npg8rFsCmEiT_MU1OnycreA zzhniOUxgD`+<2O9Mm{9QOBW;;RnT6GS{~tJ zoN3`OQdpSyl6O3_slGkybkusKU4pd5#$`TTa;dU^$ZYZAMw$#3*QRxQXoycc)XkH< zfc$oFsA1!bkAp{OWb^uptw)l|Tp_W6szWO%bHv!{^s<%vq;oUliiT5daQJZRwaow? z9x8rvo8qA(Bu`D+ky1Mn+2#nJ-!R|?%)^zyP2gz*7E1t+jEjDI1NB8tP#{j%)!gt`I`En4ks9L!jVi#wh{{^|CE+T9|C=1eEJs=^Y{iE|r8#J`n;Z8kcS`!v> z=GM8MCwf_n(9*CBW~vwIIr#mrlYmh8JAVzu^4dviS}X=@%QK~g;HPQUuV;lNhH6QO z0D*S=#$|&1*D!Ix!J2BiV}y=pCzK5q$J-Q+xvkBVm#?i@@WiXn&;BrDH;+-h^J(K# zxn06DWI6-JOQvGePUB<$`e>u#+L~t${$&tf<(Y}6ieD>>yE17-i#xHM9gm#wLbWev zixoSat=03Qcpemt;6~=uVodob6BVzXb{nCabMTm|>8&6z%#3e>>9S*guNN}Fcasoo zQE`tLqwlvo$0*4vkE`r>H#M}r$;pL(;(W&Qbf*P2gG>wxw5rlKnQ<}|2@d(4&%~Ac zz{Bg>q}I^+;9eRg>h)ry2|oJa4X42}&~8yq{uqr$DDT zKwIf+ZOiIJe6-;Rj=6<65wBnFJ`!!EJPXWY_L#*7N|%n;)pW%U%}!(<#8M}}dEQjr zEV@{eX!=8?AXmFb$F}?3HM((tQ~_@_vhLg}545o4(=U*!FAQw27uZWh+aFD%n>HEX zVB^#E8F?Bk8U$$22l=rsk(?z<|jx9^hbNPvZ3D|Mn z$dMlcLU4}#n?1^C`9`37BmgmwNx7C?MkRxEMJU3-!)D8?f)4f{E{7r8iXL^ zm1$hm7x1t@Qty-X5_&@8`?#(Sp`M49h0iPR?zZ!Z$;qv*!b2tC^e*ggd BWwZbQ literal 0 HcmV?d00001 diff --git a/docs/components/identity/img/update-user-tab.png b/docs/components/identity/img/update-user-tab.png new file mode 100644 index 0000000000000000000000000000000000000000..354d50e818c93b6b5a939dc047067e5363698c93 GIT binary patch literal 33794 zcmeEvby!q=*De+YU?b9qO$tb-qVOmR7<5Yt%nUFL9b$k*iGWI~4}wzC46US$gwhP5 z)X+oM5NB=Q{@m~R{yNt==lb5~x_m_T%${HEweEGVd#!n-sjkYji)|Mj9Uar9KQ3IS zquWNHqub29gC2epE5#8=N4LrNwz9J3C1qtEO(&eyZF@^Px>KQ;kWc)|n>eZ!vu-Cm z3gJj%mJYN!HE2PNXP&n|h{fTu-gg+|!Z@C9X-mk@zb!;#$d{^7RC>>Oj3^`Zhl`nf zX`UIo&-@r|giKu=Yh%%udu8^gVVR1IwZHYfp22XfblT37M%iLD+3&0aS+!!q_Lbxi zYmal}_5`)(#hOGXBzN@Hmjyke1~Je0QldTx9%>kU!~K0z_Zj?;DTZVN>GC0?pIkR$ z_bX&dU+aHU_l?curuCun$5Vk0iLuSMJ_mm;vAGv#^CPhN-TM5!wc?Yp#*ZH^TwWB@ zxWCu2jt=ewi z)OFUqdPT+@hY>Qfz}>PGa>F_gN(4StE;P! ztC$eZ$y!)MT3TB8jHs}vs35#T5but4Hggli;*b92CV#un1xviS(`^Um+c+!_a$mDs zID)f0FE8>zfB)|<A${J3vcP9jKjcZIxGBRYySG? zf4=zFH_8bkQ~#%>_{%!~`YkN9!Y(=Czi*ntF3c9rAUZlFx=R<%-E`YD-tAsw)L*PP zg;U|>J-`3+@g!;6q|?`wnY6Szd-%kkv-wPFB`}L;JH78Yp;-D{BFVV8^G&hVjw29{hF8Habd4WTC(cn_W9RL}a1GBxR6>=k;P1kdS(W)q8 zD5I(TXuhElWBoD856flnJeBgM=!G5nB6VyHk{)^?I>=X)>Z9W~nNiKf-coYW5hw4` zZWa(mDQV0lV`Uf9Di>&>s$7qX7kgyscXJ%JOU==KSv{6s$`!!j^vBm1B1iq1*mK*5 zhCZWha*^WJ+)mr%;nq|Gz3`~sylxkR4(!c%Pm*9>HUs%%c!7re{7rlK^@Oq19*fLk zN~~vnUPJcnroIx|Dnj1&5aOE)gI zrD0I_+0<;?hnD=7$K5L13aH`@{tpVWtQ&$xni8wuMPb!qomj-Pj)ys0?0 z5c6rW3)7mSho{a&p&o0(J{tpN$?YlH^sViPzl+!*$YjM^agg-HuEajHR{PXVu-B`teD`eP$r@vl|RA_H7(D z+BOUL_~rUx$$MQLw-y?mXs!#HE!(o^X(6>lHj@h*r{Mj@mD&@ki_e2O@b8uxj$i6y zDLs5L&dcdav{XisRO+Z}mt%E!9o1*CFr(Lprd3E;s^2R$EymGf^EPlu%4O+iKy|MP z4+|w4uig=7hHqV8>*wA$45!G@qAco&eaW8_iHd8tSDO^qZcMD&r4dgA$<5SU_uy5g zL>u@wnpX!23VS8X^xzxh2f6BHsYUrqeNRYoR`t=W4T>9HEtQgJ&%2RQe6dpAE>{-9 zM{+U4i|41GvWfGF4s%Fi4ds>x!lrAE20stavySs#@KhI36Omi`aZki)pys>ez0TD& zV_`GT2EUEOa$%q8C;Nx3{#cDHT}^npR@l2HBzoVw@6k!y@`0i~3QIpSKTD1419C0whwfjaxtbG4ya=H*rjB%|F=W~E;pLKN{?w?b_z4~K&|HGp}4;9x&G;+LW zJ8PVF5bwIYPl(_P*v@!Z)2AVsdUxCtmi(>f;$-Mgdmn4kcSd4oocDE_>Qzd4tsO{I0BF7l)0`v8H| z5KHFF946=4#TeHfJ=+0oKkOta7aq}w{d*R>U3(Q>vX^P!f_<{E0KmWg91w zXQ_E*s*3B=!PS>e#+>b)olUUpXf^hnSY9wN+^)DtYzSwGGjjN}Ei}&Sk$%ZB4D9eD zzUOrXh3?$TUm}a@x_f+R6W7y@&@Agr15uxH2Hr+^s*i^0JAFB>mX~sk%xn;0C^eRn zb=jy3Oixa8RdL^A{=QoNbb%vOb=ir7#2G0y!Ka5scuQu&)3ZI<_4v*oMcME>Wp{Tu zKhl&W9k3vE77{n-Vxr_dUC40+a@yU2#8{6H&sBzN%9hXPu3FGq^GcYba3$`BZa*J{ zzQ#t}(lrkhzqK+qBI30)6~vgh2W^A4$_P#c=lKv;vR7h5e%iG56pv?;dc>zVUAv~! zyyx3RoQE4lzb;MpQw~q!d}#((Vq^$G-qHa?N(2GFeGeB$gZ!dlDivEeaj0X_Z#!4g z1SwFm$L*-X#&SdCt3o`-)IHP%i#cesbh#U`80v~^bMESPU~Pit+e{QA^sHV=txlDj zkGE$awxM#JMm0I#BS4sX|EtcCYBaJSvk=^Il8Uqv#axax_ z@0%eB3n$wnhrL=&xcFe{N=y11jW`8-^bDAg{PBje1#@ni?n_*RvD?(A?fv%;s3*;@ zfql}g6&VMg=!jS*=CVEVbDABC@WfvL>uTryZ(Po~t!!MQ$l(Z$bI)Pc)_r}yz}_wNJif)??EytS>kC_E?&1)hXP>j`mPEyZd3^ss{V$eCuR9#-bA? zVy+^$GW<59mM{52gp`dl=~c0wlUZl>?F3`2f6lDkfs^V_+l)O0Grh{eCAVPPBzwKY zxO`WqGuhl89gncdi$lkIFAPipF5syj*08YEo#8V1q5L-Z2NQ2>m+xkMD8Z_x5oc=o zRegGr2cNWOX5Uvq!8de%9&r9y5?W^cpI$`0u6+oQ?o1N_hc?yhXh6DyT<_V@kZyc9 zz_-*@=Wcei2SX6BIfke@>W>D$Z7cy7@+%rGqK#RJ1c1|EGPK|b8i>%>10-9k(N>HG z(i)urB1d@siA96Re*c;3UrxaPhr7zeKv--y4|eMhlpLZX+oc!x<+K?`nWLkty*!PM zet=&&{>wt-M`{B2}FOwwn zgh`^EXSe)Z1=~y>3yP(q2t8~-PlM!r-hC7YK22! z3xftD420?xXye~00LV}Ef~8fDcB(z?Sg}vFBG`AeUl%5Ol#+(_%qp2W?hwe;lq~8x+cqPmbWXq+q)XH;zV4LSQ#H)+YQ;BaTZ= zFz4n@H@qb-LaQcTGQBrfi(;u8HCs2EHBap=U3iuk4cMUThW4m7rT&#T|ICdTlZnNv zs773c;jBP&-AcZO-1LR_mQj+SgUp$`vHqzYPL`8IO024_AoS%QV$zch5 zT|?isdCM02w2-wms;`N$QiS9g&xP@s^O=U%3IVcJSw&$E;YyaRh8-rK^FXbO^@c@iH=)faFJ*UqCL_c58HJe@2-sAl}Zn!s~iVHRjU9fsVy1S<&@tW z{sVR0Wp+B#JcpNqk7r=$ImB&mMwu|=z2rB{TDNa4h$$Sj?P@de^^UEcIc}?$c4Vwu z=n6^1Ddhp@N$L^Gt0P%x&X3MdW!J#njs^X4*mst3avm;cIgL76X+@QpTI4MDT#Rj- zRHu%8ds}^edx85muhXxT@|srFQCXe(%}mMf4JhtxL8#VZ>$(t6^Lzu^#5QfddJNq6 zn*hrXs0MWJ=!zs7+NSe6v48KV#J6%$Ei~V~V+Uc49c`$0ln#K;j~X_6$%lp|fT~+( zLM1KYAHlV&b04pSqfYU>(FQ&0A!@v^S)N^_ZEzvB`=MFjCA2m0d$-qZ@C}wJDlxo( z>8~4w47yssiM<1h5m4+@qRq@;jr#|vQ})aJNhiP0BqUKGjbkv9BI73 za`I_>mP4P(CV*1gL!6JG?T3=iKA;=JPnvO|ZsYJBfOlK|C_o=nGHh32ZP*!fF2`93 zaM-3}M(BgmLfF;8OE0#gu9^%F%!uxp5c;6_5Snx5*jIEz%()k4M0be=^?W%q!(!;T z?;kpcx{|wLMzVMQWI!EM!DFRJCc=&OJ_!x6!0szfXvERUm2?gb7>C2VorYmmxoOkAQi{a_lZ?V^tG^2?YpY# zwL$9*zV=q7lAhgOGi`n#Ory2_rMR8;Q!aTKiC(YSb_j#|!R0=6?Qu_Zk*h8OY(O$> zHFE7<>TD}HgphGK?=gdnZz}ASrK_aU3cv!_$Ku$1m&&;>Z-}=UiY;{7rMtn04oOX- zulvxU;mp^Q%6sGwHod!=T<2Q*{Pc9i0gYxKZv0n~j4vmmo}11ky$yQ2vD&ba@*o9x zEwj}&-!+|`F2V)FZ`=SA@X~Z9z(oW*_E%MAH7KwbP8Qg8taafVDuEi~AY%(L(u)vy z3BSe>>LIi|bl}95hkzOs*VlSCbs|GETOx81_fdKJ3nN~3RVgKQDAi6Az z5VlKQdhogaMm3kGz;5Y*kfl+bQZ~sh2W5+ow2lU!T$epLK@#XEP9@$tYT{kzSFP-7 zZeOpIqM6#k*+&{)ZzMJh2~qqOaFg;(>YriikAVpxret#hzUo-a2=*4(t++Y`7$G#- z0q>j3Xs}1>$DJDHg6=}sVBd9$Z%~m6@Nu=%4c?RZ&~sFw!tv`qlsH2S0*E3T>Lhy& zwTG-UqXd-)Ie>X${RZ2#^mC7|ZdH1HL%fvo&)$vo#hiFz^e{Sm(7EF*CMoL3#6DGy zYub53wq(N`xL1?mHqWutyom4|qA-ca;!G4x68NYtX1kOOm1Qg~ahE;5_oG>PU$~C( zBOMcO@dyJfaroO?RpiJx!a=Pb_!6dO8dXZp&84Jg)yr5ua3IL3i30bK^E3l-%J=pt z9Oh5?cs?3{mR6)LAlF{4H?Lh9=~17Ib)iN}l5kO56RWI?z1P~9N${fsC#!lqshqTl zJQL}`iM-yRmtxi`KrX)l(rYlxZ*u3!XwCD@i)?u^v6O6#-iE}z0RZh1#$MBvZfo;x zWG?t5SwmSk-1PBeRTCO|3D2naiEv5%?x^f?%VwCFmg z?aS_fifb=-d%1VQ;peWiR znepY7jjxr}+#ij#sJh9z7fp^(2iLsI*4SKz$^%%IIG zGTB1xt2e-e+7iPUa-l2rFyQCq7=G7TOUq@aOnV(;cgt~jMl3zgZOl!O^HLh?X2neF zXLd6*IRyc4j~!s>%p82u3R#1~8kWzuQH`OEMm)*CV3{`)c=*W3AWY#zZpQb^{4JAa zBMFg0!h$50;K0KoZ&GU40N8T?HOTL+62!p@1fzxh$4~UXjK%H57;WQc+U%yAB%Cf{ z{LA&Ye!k^iv(d|l5+?v)tk`x~@D_lhQ-g~~bw-wB96+iU*Y4$tBGMqWcqTkg$ zfgX$af#YJR7&?Y_8g>Y9ZF)V~=je(KZUjQ^XuA5fqb?YoU*%DrW+S=Dw9BZTX&b;M zp}kRIsJ88+8w~16b+;DkgYi)b{N=V=`2D}n7JhRm7zQ<+Ux<#Y4*j8&RH$UHjz;g? zDeD99AjIXWa~us?lx^NQXBeL)vj8m`JHE2s2?0l1>oO@;Dk_t#egjH2Jr)Qx6P8v9_~4*8a0 z(Gt*pt*{}vt+UROXpd!fKH#QG?vG?N$~isetvkNz#8bS2g$6zW#~|hdv`_V;ld)0_p=n@GYZ{)Z39*8&F@R)-P(rVH zu)Ov{>3plfFL0r%FcaGDNiFWrZc=}O2w4{*^fvT1IlssGbv##`B?AEy~9qsUWr{hWV!8glo=7k^vOyrG|hm5$!qNYa{OG?_bbeKzO3OTl&xY9|66^mZw3s!*O-GTD8ad?C}2u`-(6w$h0nTJ!HbE7yEA<=$?YQ&mBn?2zrX zs+)w(ewdtAz*jOIhHn*&atm5^hLd^Lz3o=@#kWsubQCQ)E#FN$~J@oFhAx3 zc5|`;sB?KAW?(b~@`51H0=(Z^K%_zlmAacS>Iu*+)|}a)l^i2#c{#DF@g-`EUdQ|K zkMrFX?Y`H<6^J8y!60~IQ4LSlLMZ*Z5DACODg zvTK#GcUq4&))kJmrJEE=j-bw9tNumP&~OtQ<}-`vacAXe@cq#%Y3TfbItX`UcfONF zeNGQ0g8z0LEkw-@Zg9Z^Sd$N+Tyo5{|NTWstm#K{nB16D@Rz$KlZ_Q7FT?s6>Ya<~6Cwil?2 zKF_juw6(YSA?oC8Ucltcvgy$@0C$wuAa6AKNMTXsJL$B^k_k61Z~lq!KPW`R5n0TDq>KQUS5eRt*Mek7TT zBsviLmJZU#iRdn=jn!H6YEIXuh<>MJeLlS!+zRF2F(Zfa5b`I^t?yAj#L)eaw|)xG z|MSLNj00@~=PRpi=vcYG)n_3qF0emXQ9*RLP6CoYOF%la0bOIg({_*CRGAcrT>78i zP(QtC>V0A?8>I2gSAoFzuuRDj0{%p5_N!Qb(QN$_Bzi7gBbT-Wkogryy>cBASj*+T;wF3!l|$9 z(pa~1I%}o?v62D#;Yh7~qK7MF5}rbIozS|WsQi5!MfFxY%RRnMZQ&?)}IXPQM7}FjL`;{c|m>*?sSzld8 zcq1SKKFnwR8;dO1c=k2cAc@h;cP1?EIa|J-@e#6EgIrUtT4HXbzU}+NQVyo$0B{oK z&J$)J-}lD4;oY$h*iWd!C&3eEC^Ky*h(tzxkN|Olhq?Z8`uXV_mrwgYc(gW7-L{zHo@YsPZq0IBl)wI0)QfJ!LhqhEx&2cW<-9p=(l^4Q_Sj0p?s860+t}T zJd@>hNnhTewXH4~J*km)s`0rvp^*1aY4ouB8Zfgg4>IjgPhq?|SVx(2Z2qW@;K_N2 zVNX3bLXRE^5XZId{C);?!F3P9jW50)XG6W36b4R2J;WcCSucA7Jhad*%Qo~UI0j-s z!rilssJn6K0r>Q5rwUPtj;*7Rc}YF+rx{v+$n)_OLIs@f5J$bLdD1VIz-Ap}hG>GM zeQ4-se=)2K&|mvUGUksYa?MW3E1%0y=Wnxl(;&;MA4guIJ4!xqg~xxQi#D$U!H>Bc zVDT9B#z`=T@cTGaH+j|%7JVnzv(xB)5_VI2e+jB@Zrlo+dBW|Fcj(UfGPvJMOXz^$ z0Gz(4|4j6M&W`%MV16kY zq@=>gpJBJa*L@%z$0H%BY%YirhFg+#3<)h-BBo_`5LSImwB#J>liJ9Rzi9jgu2J;rTU-l?=l9xOil?B2_x?7 zSCk&6p`dqJ=;rn~pOq2YCRF#iwTA^^0X!jf)vDcMh3V#A8&(x>W|HhWvob%%0`S5I ziM5e9d>HaFh(;xtK`1}Ih%Ob<4Tyvo@;BEPL8J2+z}}nO26V&Pqp_K34}lCR@o>#Q z#@E+qZN^Et75mjHQuMNFPtq)wAFyNdk08Rl>vzonRCz1Pb1$OPwbEPJ*hcFe6Sge@ zN_=|#*-s>~1SmH3e&J%T@5bh*0|!y9TeiQFvfZeVz_r$%I;}$GfZc-1SEHpI%>tYi zP(8&f{rK1Xge)#>>-SXsw0t8dCioCXT`ul&B2^AW;kXc>aQfTFwFPo@YF>~2Wl{U= zZz}lcxKa(-iR{CWtzl$4YZGMdgYH(fwiX0($$KnxNs0l_LUa{u?QKfb2u4IM4Y5ph z@hoHV1yZQv;zOe2n^Dvi?BnOzK$lQo<#VDQS~taAt2oU4#s2O>Yt$7v`x5N^7p@m0 zX!d?;9mI(xrE#T&Cs8Qq_%Gl`t}c{aiA2E#ev5f`G#A&_R=efVW^fgW@-nwu6`+l} zs1yQ3DwRT=M0+@FM8WZe$)9OLqs4!$3Gy_1`zrdnYM=ziN@0k~VchSf5ZaiiIKSAy z{I&Nt5+y)-jJ6(1P^tw_MB7Jq{rBWE`dd&jTKqcr!IdbsP?S~Kw3!L&k0hS9qI>+L zQrL|3cPhtFR{M@pIV|`8MhF3@rS$ziv=!rNJOfKsZo_m1WliY(R)E4E!`WUyKOa|s z!vBA9sw1~p9g+Nb@5Wkhj-AGfGe>6LqG8)c{mt?QV=ipIk{XI@&IptB%U&XuQrGMO z^R0@9`y3%GLbA+kiheF>4#1jKy|j*H1>Ynr?=zol5>5qCV0?_&I2w3~XN9vG<7SKK zwfh@<*YV>Zd2_5e5>Nq|HS@lTM~-AnUL~ZL_n9o$>f9=4k{qviI6t=XUc;MDVfv9q zGfwF!>adS*E3jXFAndzLLW+qZrkoK~9g_BE#}!>uj+S$GLMksZK=@aM_(de!InfS< zNVmW(JpqZfP;QUMSUc$2K^nev(c;lvMiV@|BE!5Nd`NOk7&|4-*JnJxKPUqsf7?pe z=U*szdrT||=5<})+#OxbW|y+BcWu)3SLpoHLLrZY`9i&uj>U_VlE^=Bkn6a>6efqfDU1Q!(vk;ZJQT<#VS zSiZZTi@8UJ(f~4&nUDAg6vLW52RNb7bGTf{s#lq8thD8Wx=>9sDq){!w%p+J8<*+4 zz*nk7@F!h9I3Vqw`b4N8>G_#o`u1I2zO+1Fl5&DK$W4UL+0v5`+3M+>#&na?8uu<> zPcnehkN7A>615;nkC$$&ALl653<&C52?KdF#W-wzy(Q+A9=P^1+nMiHbMwQGqNd&o%M z;O?lLA|>S0L?pzlOTimU!8K(PTjoAoeRcLUELY~zT%sZ;k`3SKRk~Cu9N{SoMIVT! z=D2CSv>lptZq|uci!`ZeNri*xNbG04jVl;=m$~b#t3`YV@Dfh;IW5{xOx9;29f8=0 z)Jn6Y^ln%@y8r3k_G;ip^zJq>p2ss|a{(A-rJShKD(Mid_$mT?h_;XKgq_I~MolCq zzQ0`o_#;HpUxD+PjS{t@Pwx=D;tfEtb^-LF%)tsPHhOEXlAq$YQQ>H52YIj0#tFBP zJc^{PayM8gFHy#N=5&~wx-+$>_&%{kp2F8__$A70e7nMw zAIF;;6DJjyFA;k|pPCZwx-ybjJ>HQ;T0oK-nY>GJ8_RJdDkwN}Qrzl2)kyZl^D;Wi zRK?a%_bOV*8n3X~NTwM>>&sx2L3p1|BkO!=s2_4e zBn+3o0cevq2FThu-DTtHL!XB61tP6;8kCboa}8QK#JdZ?LIrQfOKxay#n>RB&MX%4D;A@cVA$Ce;Oe9z0=ZtE@)Cb3-JVs6(k|`#8k;bT5`ZdsZ!K_6A}<^gJ7rHsaBld1I=wv-TfW%l z*pn47c@zc3Eu9|*iF$lI_rBQr`uKv8{iQID&-oxpF7@5ecZj0o6=VHh6WOH5km}Jp zUvFE~6=}KCY0$wFGbvraCObA_71L{IRM>o7EnGTJvUPQVQhf9EeAn8HE`1?JnLHj= zN^U)j_3Y`I{c1kj*|xwzMmx*`FO-_@7hrJ0_nHN`L&P1D!{0W@&0Zl3#dOx+asE-} zH&|(^wfumCM<;t|SGPSRFPwMcv&PFdXucciMa=?Rx(ubGk_ofhZX+qTRf_Mr^+;R- zo9F-}-jqqy)h3ss&idUTHEDJlw2O#O8hU>Gg)FdUJys0r!Z%Q`%C`6pxM z2Ca0X@Q^0u2_mH$xD7RqBwHoD6h7<;LX=wKjdxd0Z?a6>Zj1j6 zqT7AMl{|g-sCj#&Tu(oE-%*tc#K2wG{sDq^A%evsm{ri3FygY-C&3^aF(_n7U`vz) zO6+fRWn_7Yrjn`C^t#@GlRE?cO`V9 zf}mJ2NPeMx=5B@nzOiE=LD>7Wy4276HB%Bg$%v^E!FJ_$oEj1?1Lr%# zo53fwHlOZmG^T?Y810r*G_i@;0^O&d|kBK?(uMMlPt88|tls z$hwq+hLl?wzlk6ant1I-V?o4~^NN@dhMMCPIP{k^nEYb67?05l3BqXe1L@*&%FwQ+ zFJUJmUlnjFjL6FjJ?=D2jT+oJgk9{yYwYw9+tCeNGwDMYUwhqNS7XY+VTk|ujx&8= zc~mElwf3==T7|OE3y>j|!Rx;di{kf=gt{~7dXl%av41;0FT18+FX$YqJfeSdOdWNI z%l&V)O~@{c&srKTKg;&W1^qTufxGj2~zi0Mh>#psPNu26reDR zG?4-Q>L-AD3|Pt)RG=*21cTx|>3Rn^x6w`VEZelbLYfjSR_%@OhgHGciq$0^Yx$u6?gxYEjG+2KF`&irA$d3^zRJsK zJ@oaZ`Dh?nSrA;b zL)sDPPLQMUZ*D`MLy@czJbP||0BtiCF*bZr6&^hRV|#@pRs zNTdZsM-C3(5QAhWkEelhyOX*gLC<)2FOug&ItL_>m~{;IZBRB=p^R0|Nkx;?61hsb8gCJ&g znuc&RVnPwhwvXGyNIBk`a8=b_SBEGE(L5uSvSc+G1GF^_;jsCDd|0XY z1>AN?l9BoZ1_BjyTu^3wb3top>ms>o7P@ER9JcxPYRLH>GPSy$MLsyLB)fb z%^H-RHNRW^MM%tq20w49Ao>FE{Z&x6Urk^iNT|$Hx#Rw>DdFzt&$9Lyh1yX!pN3gJ%-1lFi-{(2-5m$C~iDZ9Ef^=^aO_jgWdFY5HO5lt48HO@8SfGd9vtmRAtDDPvTPREpwr3DcyWxU;JxoDZ)IIc&vxk;5wyJe*?UiInq{?) zzBcx(t=6MNFX#vjx>YEi%5k9NZ4?i+LM(%%_tl6GfaiT~2SxB|q2~3;g78DAunT&9 z-IVcWCc#ooBd_7c*BM|^s-Xf!Yl1J?F{^bF;eHkXBbz%e4@R~HSwDI}5-Joxnxa>T_2tP63lw*%cpl^JSr6A< zZ&%`#w2C@YVsYj^BsxAV8JgpgmGA(KK%w(<-zo4cyukhE+G4LF7CO6hazsGtyB%(W zNHzrKEoKKzp?1W6!p%Pq_!@lFq55s?%Ur&x$tJ(Z0SanYDGF z*s@3N45DqkZl2G_B$8gTfJUJKdp*3c=#hyp`7}=D0-3zN1)rYsA~b2h<()kzfAU$| z7fn}VAlHneC>)(+#dMLO9AVNK3u*t{d2dRK@ZumtD|B4xz}Ed(sLzT+fs>$8uG#i> zBIjc6^}OPpKrDF2n%R1;u~_+f`eB1QjEiBdU7fjzyYk+qg3acf_`r>3{HZtmE?&Q} z=xsZOUV5SF3P7g&5)(Q+tU^>z)^--C$g0^0(yp%8x1a*rct^lpRUK^Tx$eusxolspN^g)d@gi^_)cq?+hZHD2?5g>c(-p--ID&)qjAj`q8RINR(iC*J{kqNvO-$QwS_v`5f3~*;J48 z2tm5H9F}n&=5T#+1fxohTc1n()l~}2Ep_20Kfve<8v_ zk4UEXKZ#0&DeMf}GzpsJGa7FZu{M|Y+_#yy5o?cFZ!s-yIX4GHNaYAs*p*0^FsRix z-$_t?diYwEJAkvJI-4jNjGkh1sdxKqzk;Qb<$~TUx@f)ZU-1Rnn?wcS(8Y+I zNc|HLE3U%j1@)37=ttA@2(;MJ62K%N#c6WuOZ}k~3{)jqJ~h1L1q)Sy6z)S={M({w zBzsw90G*Q5;zl*Z^8kOIK5^y6UIY&VyK&MfP0JJLcoG5XB3FtC^V{QP8nkh(%Y}@|sA99LKziDQozw`z z+yFj-UqVeF;{wv5!7>hwK^Ya)+*W|m>C@(SnbikvS$)K7oKJ!NM{>6CWm4JM zEuD<}0WyC{fd<~JR zCQacdCA?SWKy!HVa(nb^i}m`D99!1=R_(wL`AUJvKDYw$x1XEkdVsv&@22e?2WSu> z!ukdyO@s=qzP{K;#2L4xPD(2OESf}we~^6kl>@?mu&YSD-W&wzd|dA7T68g-NF#*( zx2W*{L2fhu))wzP*OaW;I!Dp7^>p4yV+qEWWfv`zH}{OX7E?0M^bnKH5ZOR6J$gDmzv8yE_4LL?a7sJjGdR*zhcL=8&C*n%C1xRrU{wO`aFx4?7NeEZ9O_%jFv{K0YMnSpSy@(M*X!xzbl55Q zFSHfFTrUd6Q9K}lIcam3Ei-m^EN#Zs>h|)NiQFUD7RmCSv}T~Fqdu9^-@zzirZfLM z*CM*3jya8ZKBqV$`46$OuOFopS*3=2XX5z(NRAlX)fr?kfunUVRNAq|TM+{opNqBE zjZtiyM%h@~UB+5d$J5Ub!9IlBN66P`RcIweCEwr9#MZoU9d8dzHdoE}Js7HF`Ucb& zKaW4VrJqqhIl_|N={P<@CP|yVv@N6lt0YsCX!-bu!BwZ-7)ofeFF7}Q<1v4lE;(GA zI%qOxkD{+r+P>`r%NxQ+8b`O&1DuX6o^qewdD3w7NApzZZalnG2|!4$LY9z+Sj^xBH!AS@nXA+0;`X9!YgsRnrcZjJ%8L1MNc^XKZgqP`#v@>Q~Mx?b2lFR-q+D_S@lc zA9}m0*HCbQrm&ykqbST|cs?Ne4|C^pWb#H0Qhx}ZbPZKBTDf?8UZOTcO1b$%6*ef2 z--^ud+SoBhx!j4QES^i+6yD025EngGr&YviHMFaR(Hn1)Hdz;5q1XAkI08ysiG32J z(-tKC5^43;nYxIdn24w(ePe6LMe)Zmnj-m@%=6MZk_}W{RZ0}U!|W?P^L!6!1Nyex z26Y*))aGN_pfFM=AH(^RNX;6hqGUD7KJTzFjmp7i4Z8S$FhIHehWdL?e$29b3>^t0nN$&A=Et-_AEnM-DWn?=i#0RPgp4{2U@x$zaj z3h`*{CzQ#IN@BY8;pH8o&BaJcRb)uN+TGq_gHav_^l~Pj1XbANOoU+G#zJ0cWjZ)F zCq?OCubpJ@eC*H#5w9oj1+_P-CH8_;S(EGta>q>N?Fp!x@e0_(Z9EhK%{gjlwJeo& z>4S2!J_wVs-q4$KtG<7s7SX>xsQA>1 zE7G+$dgJOwZ#vQ|_d$URInq_IS&2zTdP}vJyN=e0_OKF2R7;5+q8{E>E;DFuYk(%$~_lU4V9WV zoj<{|X`h8f7~Pvpju($&kC>VAtgu!%92@7Y;eE38?1deVG7oGWEo=}>ZgMW*ixQ1_w2t6?5_Z?(?BT! z>)BBH4UNieyagf7p{O%?YADhdB~PIH$)4+hv1qZ~AyDe%w%;cj{hJR>BKOSV=Fp;} zY^3_7^2FB(w5Y4G2S&6I>-!c}QdJ4Wv!H|-7FANUfV7HRTxCa9R0$%As*IiZLevrE zm4&PyUI(V)8+Rf>9c@NCvhSBwJUT#|P@o-eo@ij7l-zj|#fn2r!LUQu=k>M|Uj)&n zrxXvlj8ru@G;tR4R;U&>eb$ApXdZ=?DY&nLK02gT%762r*+0g(H1Yb z2oyaepxb!JT>OvU2ItqtFlUfNTOnmvCjwP=R8-fnwUz8c@`#b7P5S~**Y8?N>yGk% zQT2QOYC?%aR(}bYYD9#~fwT-^)CF>;`d1^3^?|s29LRA7=Vw-d zalM2{SOyP^Dj{8E8MzhYgo>sFWM6I2!BgcC-z zV(5Angv41sD@}1#&=}zm`~#Ch9C{@JjmLs!n|q;^iTohhwRp^E8Z=4bNSD?N3k|f} z5s`QKO@p#2YwjyFgLPCv%4$TQiPqAv zs-iwr3AK$!N&KpXL=-Z&ka8b@(#c)D!-bKu_#k!p`DW;gpwi(Rc2(ju%{foLTETaH zwcYd{Q>{5tNHs&tLOQwfPCy^?KnF7|kRtDKN*MOxJoQ7bI#|P>3DKnOG!@r40y%D!^6FTtio_^WjbwUB@ zMC&(;1kFpd-i_Eo63;9M*wj)$$TCP-Q8c0rE-=n#;{2cYE>%hL-YbK;q@o_nM{Usk zOGF*cPCKr2?G^wh-01hOZ#tF=jOUORcv}Xdt5<{Rpk1oF`yV}O{;%dEHd%DX`>a1; zV5x#O$|Ex&j1KrB>1w1ziQVL7LFjo|%Ze3TVu8W8o4_&YJ!m^r%ZQStq1- zNE-NOAg%3ql@~xemebWbT!^UIBGe2mYJ8xm*ID57cN@>3x5k3e;pME)+Z3&L#BB1; zwZeDRSRg@NsVi&O;yd1=qL046g9?3PQzhl@6#qI?I}qat@H=EZliZTxVd@S#p9tnO zy%t1F7RelYI$Enh&-%euL3OB0f&ioVxX0&%@_bm44N z%482T9pVkHqndKjAg%B`;Oxqz<&M}Y)^#f_9Q{HE8>XRlcBOpGskpyLUE9~1M8!@v zkn;Ln_0UpAA~Q1=Pg1Og(6*Or`Q#L+ z7t=|6Erts`krFi#B<_Lh^sLx!=mBL}6GfgqXU`f9eOdU_D6Ftsg3a+UhkpdE*>fk&h=PP;ZK@ji5Z0GlkIWTF*QMF z`&CL*%1xwMqpI$UsHniaj*@Y5*!1A{!}C96XclAk+T`zRrL11An3z1l3E5}fV{Nq` z22!?8-X{6Xmvo%mGQLt?#pb=}r1xl58U$pu30w=HS$EP4Q6Y={*nM;%SzpTqbzKwHt^b%|?D&dW$Pk!?E3nXw9;+P6+)FG{ z&YG4WM^eVVEX{DRI#V)Yl)sP1ZNk5r%N-=Ld#ieQ)~l?E3e-6ibhrvvN9LNW_OXzt z#%XvjNWO*l+h-RWr$+sBO`}DJ56(aS0SyU3ixO>yT@Scd)G*ib`(xH=VCpD6Mki%) zCt{PT83t#5d zW;bDs3^anrI@1dqi0ZaN`$7b{H%Dk?*MTZ31~1=gc>Z;wAooH9r9PsqHi6yAz*TTd zIioMEVDD~{RX-+IxS=;}+H&euTZ%A$NJ|bPrgisR{*h^TFQ02%0Wvh*-7e*rx{{+z zvhxnALa)zQ*GJC`ulfusx6Hh@t}F2*=1wEb%*;=F=}6)QRiWZW8_!s|NY$F{87;}F zS>NSKBlWrsa3s-c)~ysL2EB(sYC#_7L9Je-f8k06b-t8*pp5#{Gq#6WR$8RF zzOpO!88hhpK%I1(7;)s}d{y+tK``=ejizwqL&RHFe?!_tEtlnb@#ysER!Z~AR z9jM>tvpkjUb*Bqy0!`maT$qA%6FJF~D9^n*kMtX3yd$QB9mqWU#HxSHYYU>PB?UBF zmPJh>T2WFrtI`l#p*xlMr%Jt=F^h${+Lk66##}_xg=NyET{UCC+U)k}|`V_v2f>ouq66t#LAn6l; zTD}w7t}9Yrz_(CnuM5oo!0xt@=$TxYckv1w64|n5h|kYU{pR{-9)%Rpa5YY$n6b7= zywp0zAd70OeUBoO$I9r64a{{_c-KL*eA#a}`R3b7U0s^l?};U)v7Hw59ZB@1M9n&U-T3;96wlK2S+z>B3^k+V!UYPZ2PJs35eG$;=vQ6sprOuW zc?{C#cJ+36Zc4vhxMK@dtnEbW?^a<)c0t*$R0X<4lwcaZu*L=HD%51p{=4af2vATM zBB!_+V%|FM$k6Jqwfa`?I%oM|KeeCxeNNbSMMbYjYB^cd~W48ED~B;|#<+ z5pn0Y{FbeNqZp4=u}+*NSD_U_DUp!QOFp}pPy*ZkO!P0y`JWv{h>iaoT?8oo=NU!J z+W$FY#5jW83hlARuvwUYm`MHerl1HDSyxhx!c$JdL_wklU-c(2VsCMj3D&@lpFF(fiv}fzhp!Soq!B!*5I* zK~J&0`+5Em)H|OA4o)IB16|{FPhBZVcKBTd6H2}g%y|ZQiHtz`e=N^Gxr@WjFs5^o z$5FpIVbkV7P*enB#?k6Z?v%v?Q@Oj~w4*ZWooxibt=XHS_dlhN0bO$A)kmmbFmXr8 z99)+R4AM#x$1IhnT8=1y$ zbLo`3_0?mGw^rNVA%$Dkjyb!eLP$MTK~|Xyf_B0cNIma{Ua?5Fo*gR*9pBMX%Bzyy2N5`J2(>vGh#V7XEfapZ*Jme|rnlwqg_@1j%|~?}wPVAM z3yay#Kdfstaq{%V=p`g6=X*TsjiZs;-2X;Hrk-lVjqSMt6^ls6{uk1CtC5*T9 zZ@m{0Ym@H)bX_DTxKJoCveq9X|I zs-QDj&rdnv(4>Z5nBM}r?g>(PCseZ3_X56ehv*CXfyvP6=FylvSy(~b!UF7h-CXOw_O@CSR(WuCvY29ksw~w-pn{fSE>3LLP ze*Iy&g8n1Mr|Ctf`=XPRMQ~;nX$Gp%^Octw`F-r-=8G?{wx!s9D{Y-s^Sr>Z5_8$n5el^dVeUCd@ z@<)d{6*m5kw&voLN^g#)Wq-dc0vUTzn+cCGq)3W*`vJ4|Lr7Ft0z-5lZex{V-c#fr zdd{I32oKu~Smo-6`;PV@ortz`dwnz%eO=;Sl2LK#YR9W%*G;hdQ8yFX91P(UC&Ls`6>26i@)$-QKxgF;=}3dn zDxUv!`n`h}`B+TmP}R^XpQ-L0)+p{T=VXfq;do0q8I?4Z$Q}}-!6<25E>TM`dq&^+ z7bFhbt`jk0$Uf5ED=3!v(NDE`@b4b2sprMkzO8oYxva=rxqEJEA#{G2L%64R zeV-^bR`c;phKcaQ>qo-OId|rb1Q8k)qD}Uvf6T;-1vK`Muo`tK^0IId=lC?CYxjX1 zn63~*ysFy>wRj=aP9$vz_i<)T2XYmv^)vL8Sz~JAE2{1$vRjQ3j-Dz$fFF#M12oX1OS0p zAO5cUuPt(5`V5JGov2-QGn6R7jEdH~ zX*C9{{G6PG8WBw*qi4Qb)bf?oOYG~A?!Uh>&X)9)+gn=EHfO{>5)`kVrPpqE5awg- zD>3z}F4$T$t4}nfKPF37U!Gu9=U; ziV0dI_0HDCrTvK=OksSWay3=jjkG`HOuL@+o$!7ll z;v-dcIUd(fF!_`Q`FZz^FztvBu6QwHZ<8%01zS+-o7v9g!0W~0QpP0Ki0B(eJ!==s zgb#=k6|#`0d_%7r$H!+5T&K4Q^xmawq)z$r&5#EGmI28MvmltDtt$rkfma8oLWL8D zsq~&2k`^{&@LbK@bdnTJ8ATujF;Ok&)}DHKJK~mqy2ZYT(}tV!EB&AUGl4m-B}aI> z5;}g&vsQ06!uK|c06vD5)Dn*d{H0USHHX~4$ z+W>>sxWo!p%daS%5MpiC&QJsq}83 zFa`iqkx4oS^1>m!g7D-E7TY0G2B9NCC5#kV$#~F8i>eJ8_QY%%PX=T85lLj)4`6gK^Rf5KNK?7EC4REzn z&5vzj&ixHy4%owoAo^JrB;h$3zIwxpULS+@-}Zfic_53CZO;6ya8z6qKoi!^LD z?|zeOpr75@t|PKWSOq`XtL_$dt0m!r;X`R6os<=%h9TK}U1t3)tgcy zxnx)4uyjZJIO`gOSG#!Y+6mp-_*YxcN%|?4p?T4iv+~UN4Um&!+LSRwY(eQ<6w55= z3RyYU-ROm$15U?-m|rk0jzL2X`JUvxg)2>2G~mI|HFPDB0!eeGVQmQbc6k3c{-?h8ZoO>BJO<8xE9ha4Fb7x8Kn zD~5&?74tfR(OYhE^2Do3DEu?(9XrIQ7|x(cURYe&=E}v?YdW8^Y}-}UJx$}!)eiQD z;aiJHmOylT1@jf9{9b0Cdy9Rx7J}(&gi-U(*1zy*))Y&qHAH-{kD<< zGG`pSJ7mp{-KPhjs3r4jw74#^YT-&JlY3?zG&xz_v-DumlHz%=R#!l!Un*Gtyp2Gq zQQRnNsVb~WtJme$TA8oIsq_p7&yHoCmoR9o5$px>Jez148BcAq4`!`wR B)&2kg literal 0 HcmV?d00001 diff --git a/docs/components/identity/user.md b/docs/components/identity/user.md new file mode 100644 index 00000000000..866d9fe4fcb --- /dev/null +++ b/docs/components/identity/user.md @@ -0,0 +1,58 @@ +--- +id: user +title: User management +description: "Learn how to manage users in your Self-Managed Orchestration cluster." +--- + +:::note +User management in Identity is only needed by Self-Managed deployments. For SaaS, see how to [connect your identity provider](http://localhost:3000/docs/next/components/console/manage-organization/external-sso/). +::: + +Identity provides unified, cluster-level identity management and authorizations. User management is a key part of identity management, and allows you to create, update, and delete users in your Orchestration cluster. + +## User management overview + +User management is the process of creating, updating, and deleting users in your Orchestration cluster. Users can be assigned roles and permissions to access applications and perform actions on resources. + +### Create a user + +1. Log in to the Camunda 8 web application. +2. Click on the `Users` tab. +3. Click on the `Create user` button. +4. Enter the user details: + - **Username**: The username for the user. + - **Name**: The name of the user. + - **Email**: The email address of the user. + - **Password**: The password for the user. +5. Click on the `Create user` button. +6. The user is created and can now log in to the Camunda 8 web application. + +![identity-create-user-tab](./img/create-user-tab.png) + +### Update a user + +1. Log in to the Camunda 8 web application. +2. Click on the `Users` tab. +3. Select the user you want to update. +4. Click on the `Edit` button next to the user. +5. Update the user details: + - **Name**: The name of the user. + - **Email**: The email address of the user. + - **Password**: The password for the user. +6. Click on the `Save` button. +7. The user details are updated. + +![identity-update-user-tab](./img/update-user-tab.png) + +### Delete a user + +1. Log in to the Camunda 8 web application. +2. Click on the `Users` tab. +3. Select the user you want to delete. +4. Click on the `Delete` button next to the user. +5. Confirm the deletion by clicking on the `Delete` button in the confirmation dialog. +6. The user is deleted and can no longer log in to the Camunda 8 web application. + +### Assign authorizations to a user + +Please refer to the [authorization](./authorization.md) section to learn how to assign permissions to users. diff --git a/docs/self-managed/identity/orchestration-identity/authorization.md b/docs/self-managed/identity/orchestration-identity/authorization.md new file mode 100644 index 00000000000..cd66a5cf24e --- /dev/null +++ b/docs/self-managed/identity/orchestration-identity/authorization.md @@ -0,0 +1,51 @@ +--- +id: authorization +title: Authorization +description: "Learn how to manage authorizations in your Orchestration cluster." +--- + +Identity provides unified, cluster-level identity management and authorizations. Authorizations are managed through permissions that can be assigned to [users](user.md), group, role and mapping. + +## Authorization overview + +Authorization is a mechanism that controls access to resources and actions based on permissions assigned to an entity. + +Camunda 8 cluster uses resource-based authorization control, which means that permissions are granted to entities (like users) to perform specific actions on specified resources. For example, permissions can be set for actions such as reading, updating, creating, or deleting resources like process instances. + +Authorizations can be enabled or disabled for each Camunda 8 cluster via [configuration settings](/self-managed/identity/orchestration-identity/installation.md#enable-api-authentication-and-authorizations). By default, authorizations are disabled. When they are enabled, a user is not granted access to anything by default and must be explicitly granted permission to access applications or perform actions on resources. + +## Authorization concepts + +### Permissions + +Permissions are the building blocks of authorizations. They define the actions that can be performed on resources. Permissions are granted to entities (like users) to perform specific actions on specified resources. + +Permissions are defined by a combination of a resource type, resource ID, and action. For example, a permission might grant a user the ability to read a specific process instance. + +### Resources + +Resources are the objects on which actions can be performed. Resources can be entities like process instances, tasks, or users. Resources are identified by a resource ID and type. + +## Create an authorization + +1. Log in to the Camunda 8 web application. +2. Click on the `Authorizations` tab. +3. Select the resource type on the left side of the screen. +4. Click on the `Create authorization` button, this will create an authorization for the previously selected resource type. +5. Select the owner type (user, group, role, or mapping) to which you want to assign permissions. +6. Add the owner ID to which you want to assign permissions. +7. Add the resource ID. +8. Select the permissions you want to permit. +9. Click on the `Create authorization` button. +10. The authorization is created and the user, group, role, or mapping is granted the permission to perform the action on the specified resource. + +![identity-create-authorization-tab](./img/create-authorization-tab.png) + +## Delete an authorization + +1. Log in to the Camunda 8 web application. +2. Click on the `Authorizations` tab. +3. Select the resource type of the authorization you want to delete. +4. Click on the `Delete` button next to the authorization you want to delete. +5. Confirm the deletion by clicking on the `Delete` button in the confirmation dialog. +6. The authorization is deleted and the user, group, role, or mapping no longer has permission to perform the action on the specified resource. diff --git a/docs/self-managed/identity/orchestration-identity/identity-introduction.md b/docs/self-managed/identity/orchestration-identity/identity-introduction.md new file mode 100644 index 00000000000..1b2c3638c26 --- /dev/null +++ b/docs/self-managed/identity/orchestration-identity/identity-introduction.md @@ -0,0 +1,11 @@ +--- +id: identity-introduction +title: Introduction +description: "Identity provides unified identity management and authorizations in the Camunda 8 stack." +--- + +:::note +To learn how to configure and deploy Identity in a Self-Managed installation, see the [Identity configuration](/self-managed/identity/what-is-identity.md) guides. +::: + +Identity is responsible for managing authentication and authorization within Camunda 8. diff --git a/docs/self-managed/identity/orchestration-identity/user.md b/docs/self-managed/identity/orchestration-identity/user.md new file mode 100644 index 00000000000..866d9fe4fcb --- /dev/null +++ b/docs/self-managed/identity/orchestration-identity/user.md @@ -0,0 +1,58 @@ +--- +id: user +title: User management +description: "Learn how to manage users in your Self-Managed Orchestration cluster." +--- + +:::note +User management in Identity is only needed by Self-Managed deployments. For SaaS, see how to [connect your identity provider](http://localhost:3000/docs/next/components/console/manage-organization/external-sso/). +::: + +Identity provides unified, cluster-level identity management and authorizations. User management is a key part of identity management, and allows you to create, update, and delete users in your Orchestration cluster. + +## User management overview + +User management is the process of creating, updating, and deleting users in your Orchestration cluster. Users can be assigned roles and permissions to access applications and perform actions on resources. + +### Create a user + +1. Log in to the Camunda 8 web application. +2. Click on the `Users` tab. +3. Click on the `Create user` button. +4. Enter the user details: + - **Username**: The username for the user. + - **Name**: The name of the user. + - **Email**: The email address of the user. + - **Password**: The password for the user. +5. Click on the `Create user` button. +6. The user is created and can now log in to the Camunda 8 web application. + +![identity-create-user-tab](./img/create-user-tab.png) + +### Update a user + +1. Log in to the Camunda 8 web application. +2. Click on the `Users` tab. +3. Select the user you want to update. +4. Click on the `Edit` button next to the user. +5. Update the user details: + - **Name**: The name of the user. + - **Email**: The email address of the user. + - **Password**: The password for the user. +6. Click on the `Save` button. +7. The user details are updated. + +![identity-update-user-tab](./img/update-user-tab.png) + +### Delete a user + +1. Log in to the Camunda 8 web application. +2. Click on the `Users` tab. +3. Select the user you want to delete. +4. Click on the `Delete` button next to the user. +5. Confirm the deletion by clicking on the `Delete` button in the confirmation dialog. +6. The user is deleted and can no longer log in to the Camunda 8 web application. + +### Assign authorizations to a user + +Please refer to the [authorization](./authorization.md) section to learn how to assign permissions to users. diff --git a/sidebars.js b/sidebars.js index e552abf763b..b5dcda6c3f8 100644 --- a/sidebars.js +++ b/sidebars.js @@ -675,6 +675,21 @@ module.exports = { ], }, ], + }, + { + type: "category", + label: "Identity", + link: { + type: "doc", + id: "components/identity/identity-introduction", + }, + items: [ + "components/identity/identity-introduction", + "components/identity/authorization", + "components/identity/user", + ], + }, + { "Best Practices": [ "components/best-practices/best-practices-overview", { From b0e1496193c310c4a6075f6faf5a5c057b8df797 Mon Sep 17 00:00:00 2001 From: Nicola Puppa Date: Thu, 20 Mar 2025 09:30:33 +0100 Subject: [PATCH 4/9] docs: remove authorization and user management from SM section --- .../orchestration-identity/authorization.md | 51 ---------------- .../orchestration-identity/installation.md | 2 +- .../user-guide/authorization.md | 51 ---------------- .../orchestration-identity/user-guide/user.md | 54 ----------------- .../identity/orchestration-identity/user.md | 58 ------------------- sidebars.js | 6 -- 6 files changed, 1 insertion(+), 221 deletions(-) delete mode 100644 docs/self-managed/identity/orchestration-identity/authorization.md delete mode 100644 docs/self-managed/identity/orchestration-identity/user-guide/authorization.md delete mode 100644 docs/self-managed/identity/orchestration-identity/user-guide/user.md delete mode 100644 docs/self-managed/identity/orchestration-identity/user.md diff --git a/docs/self-managed/identity/orchestration-identity/authorization.md b/docs/self-managed/identity/orchestration-identity/authorization.md deleted file mode 100644 index cd66a5cf24e..00000000000 --- a/docs/self-managed/identity/orchestration-identity/authorization.md +++ /dev/null @@ -1,51 +0,0 @@ ---- -id: authorization -title: Authorization -description: "Learn how to manage authorizations in your Orchestration cluster." ---- - -Identity provides unified, cluster-level identity management and authorizations. Authorizations are managed through permissions that can be assigned to [users](user.md), group, role and mapping. - -## Authorization overview - -Authorization is a mechanism that controls access to resources and actions based on permissions assigned to an entity. - -Camunda 8 cluster uses resource-based authorization control, which means that permissions are granted to entities (like users) to perform specific actions on specified resources. For example, permissions can be set for actions such as reading, updating, creating, or deleting resources like process instances. - -Authorizations can be enabled or disabled for each Camunda 8 cluster via [configuration settings](/self-managed/identity/orchestration-identity/installation.md#enable-api-authentication-and-authorizations). By default, authorizations are disabled. When they are enabled, a user is not granted access to anything by default and must be explicitly granted permission to access applications or perform actions on resources. - -## Authorization concepts - -### Permissions - -Permissions are the building blocks of authorizations. They define the actions that can be performed on resources. Permissions are granted to entities (like users) to perform specific actions on specified resources. - -Permissions are defined by a combination of a resource type, resource ID, and action. For example, a permission might grant a user the ability to read a specific process instance. - -### Resources - -Resources are the objects on which actions can be performed. Resources can be entities like process instances, tasks, or users. Resources are identified by a resource ID and type. - -## Create an authorization - -1. Log in to the Camunda 8 web application. -2. Click on the `Authorizations` tab. -3. Select the resource type on the left side of the screen. -4. Click on the `Create authorization` button, this will create an authorization for the previously selected resource type. -5. Select the owner type (user, group, role, or mapping) to which you want to assign permissions. -6. Add the owner ID to which you want to assign permissions. -7. Add the resource ID. -8. Select the permissions you want to permit. -9. Click on the `Create authorization` button. -10. The authorization is created and the user, group, role, or mapping is granted the permission to perform the action on the specified resource. - -![identity-create-authorization-tab](./img/create-authorization-tab.png) - -## Delete an authorization - -1. Log in to the Camunda 8 web application. -2. Click on the `Authorizations` tab. -3. Select the resource type of the authorization you want to delete. -4. Click on the `Delete` button next to the authorization you want to delete. -5. Confirm the deletion by clicking on the `Delete` button in the confirmation dialog. -6. The authorization is deleted and the user, group, role, or mapping no longer has permission to perform the action on the specified resource. diff --git a/docs/self-managed/identity/orchestration-identity/installation.md b/docs/self-managed/identity/orchestration-identity/installation.md index 4428f2ae659..a5af21af6ee 100644 --- a/docs/self-managed/identity/orchestration-identity/installation.md +++ b/docs/self-managed/identity/orchestration-identity/installation.md @@ -66,7 +66,7 @@ Any other users included in the initialization `user` list will also be granted ### Enable API authentication and authorizations -In Camunda 8 Run installations, basic authentication is enabled on the Camunda web applications, but the API is unprotected, and [authorizations](user-guide/authorization.md) are disabled. API protection and authorizations can both be enabled by modifying your `application.yaml` or environment variables: +In Camunda 8 Run installations, basic authentication is enabled on the Camunda web applications, but the API is unprotected, and [authorizations](../../../components/identity/authorization.md) are disabled. API protection and authorizations can both be enabled by modifying your `application.yaml` or environment variables: diff --git a/docs/self-managed/identity/orchestration-identity/user-guide/authorization.md b/docs/self-managed/identity/orchestration-identity/user-guide/authorization.md deleted file mode 100644 index 254dce5d935..00000000000 --- a/docs/self-managed/identity/orchestration-identity/user-guide/authorization.md +++ /dev/null @@ -1,51 +0,0 @@ ---- -id: authorization -title: Authorization -description: "Learn how to manage authorizations in your Orchestration cluster." ---- - -Identity provides unified, cluster-level identity management and authorizations. Authorizations are managed through permissions that can be assigned to [users](user.md), group, role and mapping. - -## Authorization overview - -Authorization is a mechanism that controls access to resources and actions based on permissions assigned to an entity. - -Camunda 8 cluster uses resource-based authorization control, which means that permissions are granted to entities (like users) to perform specific actions on specified resources. For example, permissions can be set for actions such as reading, updating, creating, or deleting resources like process instances. - -Authorizations can be enabled or disabled for each Camunda 8 cluster via [configuration settings](../installation.md#enable-api-authentication-and-authorizations). By default, authorizations are disabled. When they are enabled, a user is not granted access to anything by default and must be explicitly granted permission to access applications or perform actions on resources. - -## Authorization concepts - -### Permissions - -Permissions are the building blocks of authorizations. They define the actions that can be performed on resources. Permissions are granted to entities (like users) to perform specific actions on specified resources. - -Permissions are defined by a combination of a resource type, resource ID, and action. For example, a permission might grant a user the ability to read a specific process instance. - -### Resources - -Resources are the objects on which actions can be performed. Resources can be entities like process instances, tasks, or users. Resources are identified by a resource ID and type. - -## Create an authorization - -1. Log in to the Camunda 8 web application. -2. Click on the `Authorizations` tab. -3. Select the resource type on the left side of the screen. -4. Click on the `Create authorization` button, this will create an authorization for the previously selected resource type. -5. Select the owner type (user, group, role, or mapping) to which you want to assign permissions. -6. Add the owner ID to which you want to assign permissions. -7. Add the resource ID. -8. Select the permissions you want to permit. -9. Click on the `Create authorization` button. -10. The authorization is created and the user, group, role, or mapping is granted the permission to perform the action on the specified resource. - -![identity-create-authorization-tab](../img/create-authorization-tab.png) - -## Delete an authorization - -1. Log in to the Camunda 8 web application. -2. Click on the `Authorizations` tab. -3. Select the resource type of the authorization you want to delete. -4. Click on the `Delete` button next to the authorization you want to delete. -5. Confirm the deletion by clicking on the `Delete` button in the confirmation dialog. -6. The authorization is deleted and the user, group, role, or mapping no longer has permission to perform the action on the specified resource. diff --git a/docs/self-managed/identity/orchestration-identity/user-guide/user.md b/docs/self-managed/identity/orchestration-identity/user-guide/user.md deleted file mode 100644 index ec963a1d7ef..00000000000 --- a/docs/self-managed/identity/orchestration-identity/user-guide/user.md +++ /dev/null @@ -1,54 +0,0 @@ ---- -id: user -title: User Management -description: "Learn how to manage users in your Orchestration cluster." ---- - -Identity provides unified, cluster-level identity management and authorizations. User management is a key part of identity management, and allows you to create, update, and delete users in your Orchestration cluster. - -## User management overview - -User management is the process of creating, updating, and deleting users in your Orchestration cluster. Users can be assigned roles and permissions to access applications and perform actions on resources. - -### Create a user - -1. Log in to the Camunda 8 web application. -2. Click on the `Users` tab. -3. Click on the `Create user` button. -4. Enter the user details: - - **Username**: The username for the user. - - **Name**: The name of the user. - - **Email**: The email address of the user. - - **Password**: The password for the user. -5. Click on the `Create user` button. -6. The user is created and can now log in to the Camunda 8 web application. - -![identity-create-user-tab](../img/create-user-tab.png) - -### Update a user - -1. Log in to the Camunda 8 web application. -2. Click on the `Users` tab. -3. Select the user you want to update. -4. Click on the `Edit` button next to the user. -5. Update the user details: - - **Name**: The name of the user. - - **Email**: The email address of the user. - - **Password**: The password for the user. -6. Click on the `Save` button. -7. The user details are updated. - -![identity-update-user-tab](../img/update-user-tab.png) - -### Delete a user - -1. Log in to the Camunda 8 web application. -2. Click on the `Users` tab. -3. Select the user you want to delete. -4. Click on the `Delete` button next to the user. -5. Confirm the deletion by clicking on the `Delete` button in the confirmation dialog. -6. The user is deleted and can no longer log in to the Camunda 8 web application. - -### Assign authorizations to a user - -Please refer to the [Authorization](./authorization.md) section to learn how to assign permissions to users. diff --git a/docs/self-managed/identity/orchestration-identity/user.md b/docs/self-managed/identity/orchestration-identity/user.md deleted file mode 100644 index 866d9fe4fcb..00000000000 --- a/docs/self-managed/identity/orchestration-identity/user.md +++ /dev/null @@ -1,58 +0,0 @@ ---- -id: user -title: User management -description: "Learn how to manage users in your Self-Managed Orchestration cluster." ---- - -:::note -User management in Identity is only needed by Self-Managed deployments. For SaaS, see how to [connect your identity provider](http://localhost:3000/docs/next/components/console/manage-organization/external-sso/). -::: - -Identity provides unified, cluster-level identity management and authorizations. User management is a key part of identity management, and allows you to create, update, and delete users in your Orchestration cluster. - -## User management overview - -User management is the process of creating, updating, and deleting users in your Orchestration cluster. Users can be assigned roles and permissions to access applications and perform actions on resources. - -### Create a user - -1. Log in to the Camunda 8 web application. -2. Click on the `Users` tab. -3. Click on the `Create user` button. -4. Enter the user details: - - **Username**: The username for the user. - - **Name**: The name of the user. - - **Email**: The email address of the user. - - **Password**: The password for the user. -5. Click on the `Create user` button. -6. The user is created and can now log in to the Camunda 8 web application. - -![identity-create-user-tab](./img/create-user-tab.png) - -### Update a user - -1. Log in to the Camunda 8 web application. -2. Click on the `Users` tab. -3. Select the user you want to update. -4. Click on the `Edit` button next to the user. -5. Update the user details: - - **Name**: The name of the user. - - **Email**: The email address of the user. - - **Password**: The password for the user. -6. Click on the `Save` button. -7. The user details are updated. - -![identity-update-user-tab](./img/update-user-tab.png) - -### Delete a user - -1. Log in to the Camunda 8 web application. -2. Click on the `Users` tab. -3. Select the user you want to delete. -4. Click on the `Delete` button next to the user. -5. Confirm the deletion by clicking on the `Delete` button in the confirmation dialog. -6. The user is deleted and can no longer log in to the Camunda 8 web application. - -### Assign authorizations to a user - -Please refer to the [authorization](./authorization.md) section to learn how to assign permissions to users. diff --git a/sidebars.js b/sidebars.js index b5dcda6c3f8..dcad7924b63 100644 --- a/sidebars.js +++ b/sidebars.js @@ -1417,12 +1417,6 @@ module.exports = { "Orchestration Cluster Identity": [ "self-managed/identity/orchestration-identity/installation", "self-managed/identity/orchestration-identity/configuration", - { - "User guide": [ - "self-managed/identity/orchestration-identity/user-guide/authorization", - "self-managed/identity/orchestration-identity/user-guide/user", - ], - }, ], }, { From 55fdacfe8ea6bca008f8d2998a1cc6f98a56bb12 Mon Sep 17 00:00:00 2001 From: Nicola Puppa Date: Thu, 20 Mar 2025 10:10:43 +0100 Subject: [PATCH 5/9] docs: improve authorization documentation --- docs/components/identity/authorization.md | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/docs/components/identity/authorization.md b/docs/components/identity/authorization.md index cd66a5cf24e..3b9e2ae1526 100644 --- a/docs/components/identity/authorization.md +++ b/docs/components/identity/authorization.md @@ -4,15 +4,13 @@ title: Authorization description: "Learn how to manage authorizations in your Orchestration cluster." --- -Identity provides unified, cluster-level identity management and authorizations. Authorizations are managed through permissions that can be assigned to [users](user.md), group, role and mapping. +Authorizations are managed through permissions that can be assigned to [users](user.md), group, role and mapping. ## Authorization overview -Authorization is a mechanism that controls access to resources and actions based on permissions assigned to an entity. - Camunda 8 cluster uses resource-based authorization control, which means that permissions are granted to entities (like users) to perform specific actions on specified resources. For example, permissions can be set for actions such as reading, updating, creating, or deleting resources like process instances. -Authorizations can be enabled or disabled for each Camunda 8 cluster via [configuration settings](/self-managed/identity/orchestration-identity/installation.md#enable-api-authentication-and-authorizations). By default, authorizations are disabled. When they are enabled, a user is not granted access to anything by default and must be explicitly granted permission to access applications or perform actions on resources. +A user is not granted access to anything by default and must be explicitly granted permission to access applications or perform actions on resources. Authorizations can be enabled or disabled in Self-Managed deployments via [configuration settings](/self-managed/identity/orchestration-identity/installation.md#enable-api-authentication-and-authorizations). ## Authorization concepts @@ -26,9 +24,13 @@ Permissions are defined by a combination of a resource type, resource ID, and ac Resources are the objects on which actions can be performed. Resources can be entities like process instances, tasks, or users. Resources are identified by a resource ID and type. +### Owners + +Owners are the entities to which permissions are granted. Owners can be [users](user.md), groups, roles, or mappings. Owners are identified by an owner ID and type. + ## Create an authorization -1. Log in to the Camunda 8 web application. +1. Log in to Identity in your cluster. 2. Click on the `Authorizations` tab. 3. Select the resource type on the left side of the screen. 4. Click on the `Create authorization` button, this will create an authorization for the previously selected resource type. @@ -43,7 +45,7 @@ Resources are the objects on which actions can be performed. Resources can be en ## Delete an authorization -1. Log in to the Camunda 8 web application. +1. Log in to Identity in your cluster. 2. Click on the `Authorizations` tab. 3. Select the resource type of the authorization you want to delete. 4. Click on the `Delete` button next to the authorization you want to delete. From 74fa93ff756e9401c37f50cbedb312587d89e9b9 Mon Sep 17 00:00:00 2001 From: Nicola Puppa Date: Thu, 20 Mar 2025 10:12:36 +0100 Subject: [PATCH 6/9] docs: improve identity introduction documentation --- docs/components/identity/identity-introduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/components/identity/identity-introduction.md b/docs/components/identity/identity-introduction.md index 65457875d2c..c659feeb1e0 100644 --- a/docs/components/identity/identity-introduction.md +++ b/docs/components/identity/identity-introduction.md @@ -4,6 +4,6 @@ title: Introduction description: "Identity provides unified identity management and authorizations in the Camunda 8 stack." --- -Identity is responsible for managing authentication and authorization within Camunda 8. +Identity is responsible for managing authentication, authorization and entities within Camunda 8. For documentation on deploying Identity as part of Camunda 8 Self-Managed, refer to the [configuration guides](/self-managed/identity/what-is-identity.md). From a01c096826b554798f081b5243e8d35e457c3b89 Mon Sep 17 00:00:00 2001 From: Nicola Puppa Date: Thu, 20 Mar 2025 10:14:56 +0100 Subject: [PATCH 7/9] docs: improve user documentation --- docs/components/identity/user.md | 14 +++++--------- 1 file changed, 5 insertions(+), 9 deletions(-) diff --git a/docs/components/identity/user.md b/docs/components/identity/user.md index 866d9fe4fcb..9f24a1ce054 100644 --- a/docs/components/identity/user.md +++ b/docs/components/identity/user.md @@ -5,18 +5,14 @@ description: "Learn how to manage users in your Self-Managed Orchestration clust --- :::note -User management in Identity is only needed by Self-Managed deployments. For SaaS, see how to [connect your identity provider](http://localhost:3000/docs/next/components/console/manage-organization/external-sso/). +User management in Identity is only supported by Self-Managed deployments. For SaaS, see how to [connect your identity provider](http://localhost:3000/docs/next/components/console/manage-organization/external-sso/). ::: -Identity provides unified, cluster-level identity management and authorizations. User management is a key part of identity management, and allows you to create, update, and delete users in your Orchestration cluster. - -## User management overview - User management is the process of creating, updating, and deleting users in your Orchestration cluster. Users can be assigned roles and permissions to access applications and perform actions on resources. ### Create a user -1. Log in to the Camunda 8 web application. +1. Log in to Identity in your cluster. 2. Click on the `Users` tab. 3. Click on the `Create user` button. 4. Enter the user details: @@ -31,7 +27,7 @@ User management is the process of creating, updating, and deleting users in your ### Update a user -1. Log in to the Camunda 8 web application. +1. Log in to Identity in your cluster. 2. Click on the `Users` tab. 3. Select the user you want to update. 4. Click on the `Edit` button next to the user. @@ -46,7 +42,7 @@ User management is the process of creating, updating, and deleting users in your ### Delete a user -1. Log in to the Camunda 8 web application. +1. Log in to Identity in your cluster. 2. Click on the `Users` tab. 3. Select the user you want to delete. 4. Click on the `Delete` button next to the user. @@ -55,4 +51,4 @@ User management is the process of creating, updating, and deleting users in your ### Assign authorizations to a user -Please refer to the [authorization](./authorization.md) section to learn how to assign permissions to users. +Please refer to the [authorization](./authorization.md) section to learn how to create authorizations for users. From 89e26f7cf64ea34aa0648e02a9369acca2bb3e14 Mon Sep 17 00:00:00 2001 From: Nicola Puppa Date: Thu, 20 Mar 2025 13:17:44 +0100 Subject: [PATCH 8/9] docs: re-phrase authentication documentation --- docs/components/identity/authorization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/components/identity/authorization.md b/docs/components/identity/authorization.md index 3b9e2ae1526..19a3ceffded 100644 --- a/docs/components/identity/authorization.md +++ b/docs/components/identity/authorization.md @@ -10,7 +10,7 @@ Authorizations are managed through permissions that can be assigned to [users](u Camunda 8 cluster uses resource-based authorization control, which means that permissions are granted to entities (like users) to perform specific actions on specified resources. For example, permissions can be set for actions such as reading, updating, creating, or deleting resources like process instances. -A user is not granted access to anything by default and must be explicitly granted permission to access applications or perform actions on resources. Authorizations can be enabled or disabled in Self-Managed deployments via [configuration settings](/self-managed/identity/orchestration-identity/installation.md#enable-api-authentication-and-authorizations). +A user is not granted authorizations by default and must be explicitly granted permission to access applications or perform actions on resources. Authorizations can be enabled or disabled in Self-Managed deployments via [configuration settings](/self-managed/identity/orchestration-identity/installation.md#enable-api-authentication-and-authorizations). ## Authorization concepts From ac2ace65342cf6ff492c178e65e3b491e6fdcd4e Mon Sep 17 00:00:00 2001 From: Cole Garbo Date: Thu, 20 Mar 2025 14:17:05 -0400 Subject: [PATCH 9/9] tw edits, links --- docs/components/identity/authorization.md | 45 ++++++++++--------- .../identity/identity-introduction.md | 2 +- docs/components/identity/user.md | 45 ++++++++++--------- .../identity-introduction.md | 11 ----- .../orchestration-identity/installation.md | 8 +++- .../self-managed/identity/what-is-identity.md | 14 ++++-- sidebars.js | 4 +- .../modeler/web-modeler/versions.md | 2 +- 8 files changed, 71 insertions(+), 60 deletions(-) delete mode 100644 docs/self-managed/identity/orchestration-identity/identity-introduction.md diff --git a/docs/components/identity/authorization.md b/docs/components/identity/authorization.md index 19a3ceffded..f0cfb5234b8 100644 --- a/docs/components/identity/authorization.md +++ b/docs/components/identity/authorization.md @@ -4,13 +4,13 @@ title: Authorization description: "Learn how to manage authorizations in your Orchestration cluster." --- -Authorizations are managed through permissions that can be assigned to [users](user.md), group, role and mapping. +Authorizations are managed through permissions that can be assigned to [users](user.md), groups, roles, and mappings. ## Authorization overview -Camunda 8 cluster uses resource-based authorization control, which means that permissions are granted to entities (like users) to perform specific actions on specified resources. For example, permissions can be set for actions such as reading, updating, creating, or deleting resources like process instances. +Camunda 8 Self-Managed [Orchestration clusters](/self-managed/reference-architecture/reference-architecture.md#orchestration-cluster) use resource-based authorization control, which grants permissions to entities (like users) to perform specific actions on specified resources. For example, permissions can be set for actions such as reading, updating, creating, or deleting resources, such as process instances. -A user is not granted authorizations by default and must be explicitly granted permission to access applications or perform actions on resources. Authorizations can be enabled or disabled in Self-Managed deployments via [configuration settings](/self-managed/identity/orchestration-identity/installation.md#enable-api-authentication-and-authorizations). +A user is not granted authorizations by default, and must be explicitly granted permission to access applications or perform actions on resources. Authorizations can be enabled or disabled in Self-Managed deployments via [configuration settings](/self-managed/identity/orchestration-identity/installation.md#enable-api-authentication-and-authorizations). ## Authorization concepts @@ -18,7 +18,7 @@ A user is not granted authorizations by default and must be explicitly granted p Permissions are the building blocks of authorizations. They define the actions that can be performed on resources. Permissions are granted to entities (like users) to perform specific actions on specified resources. -Permissions are defined by a combination of a resource type, resource ID, and action. For example, a permission might grant a user the ability to read a specific process instance. +Permissions are defined by a combination of a resource type, resource ID, and action. For example, a permission might grant a user the ability to read (the action) a specific process instance (the resource type). ### Resources @@ -30,24 +30,29 @@ Owners are the entities to which permissions are granted. Owners can be [users]( ## Create an authorization -1. Log in to Identity in your cluster. -2. Click on the `Authorizations` tab. -3. Select the resource type on the left side of the screen. -4. Click on the `Create authorization` button, this will create an authorization for the previously selected resource type. -5. Select the owner type (user, group, role, or mapping) to which you want to assign permissions. -6. Add the owner ID to which you want to assign permissions. -7. Add the resource ID. -8. Select the permissions you want to permit. -9. Click on the `Create authorization` button. -10. The authorization is created and the user, group, role, or mapping is granted the permission to perform the action on the specified resource. +To create a new authorization: + +1. Log in to Identity in your cluster, and click on the **Authorizations** tab. +2. Select the resource type on the left side of the screen, and click **Create authorization**. +3. Provide the following information for your authorization: + - **Owner type:** The entity (user, group, role, or mapping) to which you want to assign permissions. + - **Owner ID:** The ID of the owner to which you want to assign permissions. + - **Resource type:** A dropdown pre-populated with the selected resource type. + - **Resource ID**: The ID of the resource to which the owner's permissions apply. +4. Select the permissions this authorization will grant. +5. Click on the **Create authorization** button to finish. + +The authorization is then created, and the user, group, role, or mapping is granted the permission to perform the action on the specified resource. ![identity-create-authorization-tab](./img/create-authorization-tab.png) ## Delete an authorization -1. Log in to Identity in your cluster. -2. Click on the `Authorizations` tab. -3. Select the resource type of the authorization you want to delete. -4. Click on the `Delete` button next to the authorization you want to delete. -5. Confirm the deletion by clicking on the `Delete` button in the confirmation dialog. -6. The authorization is deleted and the user, group, role, or mapping no longer has permission to perform the action on the specified resource. +To delete an authorization: + +1. Log in to Identity in your cluster, and click on the **Authorizations** tab. +2. Select the resource type of the authorization you want to delete. +3. Click on the **Delete** button next to the authorization you want to delete. +4. Confirm the deletion by clicking **Delete** button in the confirmation dialog. + +The authorization is deleted, and the user, group, role, or mapping no longer has permission to perform the action on the specified resource. diff --git a/docs/components/identity/identity-introduction.md b/docs/components/identity/identity-introduction.md index c659feeb1e0..e736f9975a6 100644 --- a/docs/components/identity/identity-introduction.md +++ b/docs/components/identity/identity-introduction.md @@ -4,6 +4,6 @@ title: Introduction description: "Identity provides unified identity management and authorizations in the Camunda 8 stack." --- -Identity is responsible for managing authentication, authorization and entities within Camunda 8. +Identity is responsible for managing authentication, authorization, and entities within Camunda 8. For documentation on deploying Identity as part of Camunda 8 Self-Managed, refer to the [configuration guides](/self-managed/identity/what-is-identity.md). diff --git a/docs/components/identity/user.md b/docs/components/identity/user.md index 9f24a1ce054..2c7dc702327 100644 --- a/docs/components/identity/user.md +++ b/docs/components/identity/user.md @@ -12,43 +12,48 @@ User management is the process of creating, updating, and deleting users in your ### Create a user -1. Log in to Identity in your cluster. -2. Click on the `Users` tab. -3. Click on the `Create user` button. -4. Enter the user details: +To create a user: + +1. Log in to Identity in your cluster, and click on the **Users** tab. +2. Click on the `Create user` button, and provide the following the user details: - **Username**: The username for the user. - **Name**: The name of the user. - **Email**: The email address of the user. - **Password**: The password for the user. -5. Click on the `Create user` button. -6. The user is created and can now log in to the Camunda 8 web application. +3. Click on the **Create user** button to finish. + +The user is created, and can now log in to the Camunda 8 web application. ![identity-create-user-tab](./img/create-user-tab.png) ### Update a user -1. Log in to Identity in your cluster. -2. Click on the `Users` tab. -3. Select the user you want to update. -4. Click on the `Edit` button next to the user. -5. Update the user details: +1. Log in to Identity in your cluster, and click on the **Users** tab. +2. Click on the **pencil icon** next to the user you want to update. + :::note + You can also select the user, and click the three vertical dots > **Update**. + ::: +3. Update the user details: - **Name**: The name of the user. - **Email**: The email address of the user. - **Password**: The password for the user. -6. Click on the `Save` button. -7. The user details are updated. +4. Click on the **Save** button to finish. + +The user details are updated, and the user can now use these credentials to log in. ![identity-update-user-tab](./img/update-user-tab.png) ### Delete a user -1. Log in to Identity in your cluster. -2. Click on the `Users` tab. -3. Select the user you want to delete. -4. Click on the `Delete` button next to the user. -5. Confirm the deletion by clicking on the `Delete` button in the confirmation dialog. -6. The user is deleted and can no longer log in to the Camunda 8 web application. +1. Log in to Identity in your cluster, and click on the **Users** tab. +2. Click on the **Delete** button next to the user you want to delete. + :::note + You can also select the user, and click the three vertical dots > **Delete**. + ::: +3. Confirm the deletion by clicking on the **Delete** button in the confirmation dialog. + +The user is deleted, and can no longer log in to the Camunda 8 web application. ### Assign authorizations to a user -Please refer to the [authorization](./authorization.md) section to learn how to create authorizations for users. +See the [authorization](./authorization.md) section to learn how to create authorizations for users. diff --git a/docs/self-managed/identity/orchestration-identity/identity-introduction.md b/docs/self-managed/identity/orchestration-identity/identity-introduction.md deleted file mode 100644 index 1b2c3638c26..00000000000 --- a/docs/self-managed/identity/orchestration-identity/identity-introduction.md +++ /dev/null @@ -1,11 +0,0 @@ ---- -id: identity-introduction -title: Introduction -description: "Identity provides unified identity management and authorizations in the Camunda 8 stack." ---- - -:::note -To learn how to configure and deploy Identity in a Self-Managed installation, see the [Identity configuration](/self-managed/identity/what-is-identity.md) guides. -::: - -Identity is responsible for managing authentication and authorization within Camunda 8. diff --git a/docs/self-managed/identity/orchestration-identity/installation.md b/docs/self-managed/identity/orchestration-identity/installation.md index a5af21af6ee..177df7f96db 100644 --- a/docs/self-managed/identity/orchestration-identity/installation.md +++ b/docs/self-managed/identity/orchestration-identity/installation.md @@ -11,6 +11,12 @@ Identity is included by default with the deployment of any [Orchestration cluste Identity for Orchestration clusters is available via [Helm install](/self-managed/setup/install.md), and for local development via [Camunda 8 Run](/self-managed/setup/deploy/local/c8run.md). +:::note + +The following guides are on Identity configuration in Self-Managed environments. For information on Identity use and management, see the [user guides](/components/identity/identity-introduction.md). + +::: + ## Initial configuration Following the default installation for [Camunda 8 Run](/self-managed/setup/deploy/local/c8run.md) will result in a cluster with the following: @@ -66,7 +72,7 @@ Any other users included in the initialization `user` list will also be granted ### Enable API authentication and authorizations -In Camunda 8 Run installations, basic authentication is enabled on the Camunda web applications, but the API is unprotected, and [authorizations](../../../components/identity/authorization.md) are disabled. API protection and authorizations can both be enabled by modifying your `application.yaml` or environment variables: +In Camunda 8 Run installations, basic authentication is enabled on the Camunda web applications, but the API is unprotected, and [authorizations](/components/identity/authorization.md) are disabled. API protection and authorizations can both be enabled by modifying your `application.yaml` or environment variables: diff --git a/docs/self-managed/identity/what-is-identity.md b/docs/self-managed/identity/what-is-identity.md index 8a0d4b3e057..f1d4e2e7de1 100644 --- a/docs/self-managed/identity/what-is-identity.md +++ b/docs/self-managed/identity/what-is-identity.md @@ -5,19 +5,25 @@ sidebar_label: "What is Identity?" description: "Identity is the component within the Camunda 8 stack responsible for authentication and authorization." --- -Identity in the Camunda 8 stack is handled by two distinct components: Identity for [Orchestration clusters](#identity-for-orchestration-clusters), and Identity for [Web Modeler and Console](#identity-for-web-modeler-and-console). In both cases, Identity is responsible for managing authentication and authorization within the Camunda 8 stack, but each implementation requires different configurations. In the case of Web Modeler and Console, Identity must be set up independently. +Identity in the Camunda 8 stack is handled by two distinct components: Identity for [Orchestration clusters](#identity-for-orchestration-clusters), and Identity for [Web Modeler, Console, and Optimize](#identity-for-web-modeler-and-console). In both cases, Identity is responsible for managing authentication and authorization within the Camunda 8 stack, but each implementation requires different configurations. In the case of Web Modeler, Console, and Optimize, Identity must be set up independently. For more information on these differences, see the Self-Managed [reference architecture](/self-managed/reference-architecture/reference-architecture.md#orchestration-cluster-vs-web-modeler-and-console). +:::note + +The following guides are on Identity configuration in Self-Managed environments. For information on Identity use and management, see the [user guides](/components/identity/identity-introduction.md). + +::: + ## Identity for Orchestration clusters Identity is included by default in the [Orchestration cluster](/self-managed//reference-architecture/reference-architecture.md#orchestration-cluster), and does not require any external dependencies. For more information, see the Identity [configuration options](/self-managed/identity/orchestration-identity/configuration.md). -## Identity for Web Modeler and Console +## Identity for Web Modeler, Console, and Optimize -For [Web Modeler and Console deployments](/self-managed/reference-architecture/reference-architecture.md#), Identity runs as a separate and dedicated component. For more information, see the guides on using an [existing Keycloak](/self-managed/setup/guides/using-existing-keycloak.md) instance, and connecting to an [OIDC provider](/self-managed/setup/guides/connect-to-an-oidc-provider.md). +For [Web Modeler, Console, and Optimize deployments](/self-managed/reference-architecture/reference-architecture.md#), Identity runs as a separate and dedicated component. For more information, see the guides on using an [existing Keycloak](/self-managed/setup/guides/using-existing-keycloak.md) instance, and connecting to an [OIDC provider](/self-managed/setup/guides/connect-to-an-oidc-provider.md). -Once deployed, Identity manages the following in Web Modeler and Console: +Once deployed, Identity manages the following in Web Modeler, Console, and Optimize: - Applications - APIs diff --git a/sidebars.js b/sidebars.js index dcad7924b63..031135019bd 100644 --- a/sidebars.js +++ b/sidebars.js @@ -1414,13 +1414,13 @@ module.exports = { Identity: [ "self-managed/identity/what-is-identity", { - "Orchestration Cluster Identity": [ + "Identity for Orchestration clusters": [ "self-managed/identity/orchestration-identity/installation", "self-managed/identity/orchestration-identity/configuration", ], }, { - "Identity for Web Modeler and Console": [ + "Identity for Web Modeler, Console, and Optimize": [ "self-managed/identity/getting-started/install-identity", { "User guide": [ diff --git a/versioned_docs/version-8.7/components/modeler/web-modeler/versions.md b/versioned_docs/version-8.7/components/modeler/web-modeler/versions.md index b02098f326d..a07dc92fba3 100644 --- a/versioned_docs/version-8.7/components/modeler/web-modeler/versions.md +++ b/versioned_docs/version-8.7/components/modeler/web-modeler/versions.md @@ -115,7 +115,7 @@ The diagram reverts to the restored version. A new version is created with "(res You can create a new diagram by copying a specific version. 1. In the sidebar **Versions** list, hover over the diagram version you want to copy. -1. Select the three vertical dots to open the actions menu. +1. Select the three to open the actions menu. 1. Select **Copy to...**. 1. Choose a project/folder and select **Copy here** to create the new diagram in the chosen folder.