Teaching How to Segregate Teams with Anypoint Platform

In this blog, I am going to show you how to use Business Groups to segregate groups of people across different business units, projects or functions.

For example, if I am the administrator of an Anypoint organisation that spans across Australia and New Zealand, as 2 separate business units, I might want to make sure to:

1. Create 2 Business Groups, one for Australia and another for New Zealand.
2. For each business group, allocate resources.
3. Assign an administrator for each business group, who will be responsible for adding/managing more people in the business group.

At the moment you assign administrators for each business group, you are still the master administrator for each Business Group, but that way, you can delegate part of the responsibilities for each of the business groups to other people and since you  allocate hard limits on resources, you can be certain that:

• Users from one business group will not consume more resources than those allocated.
• People from each business group will not have access to resources outside their group.
• Business group administrators can create further Business groups within their own group to continue segregating projects and resources. Again, the overall resources fall under the business group original allocation.

Let’s get started.

Pre-requisites

In order to complete this exercise, it is expected that you:

• Have access to MuleSoft Anypoint platform account – If not, you can subscribe for free here.
• You are the Anypoint Organization Administrator and that your org has been activated to create business groups
• If you need further information the official MuleSoft documentation for Business Groups is here.
• If you are new to MuleSoft, have a stop here first.

Creating the Business Groups

In this section we are going to create the actual Business Groups. The process is very simple.

• Login to your Anypoint organization as an org admin and go to Access management
• On the left menu, click on Organization
• Click on the blue “plus” icon next to to your organization name

• Enter the name of the Business Group and allocate the required resources. This will be deducted from your overall organizational resources.

• Notice that in this case, I am selecting myself as the “Owner” with full capability to create inner Business Groups, environments, etc.. You may choose another existing account, in which case you can delegate full owner responsibilities. Otherwise, if you wish to remain as the owner, you can always create accounts with the right privileges later on, as we will do in this demo.
• Repeat these steps  for as many Business Groups as you need.
• In this demo, I am creating 2 Business Groups, one for “Australia” and the other for “New Zealand” each with the right amount of allocated resources. My final view of Business Groups looks like this:

Great! Now, in the next section we are going to add new users to our business groups.

Adding users to Business Groups

Now that we have created the business groups that we need, let’s invite users into them.

• At the top right, click on the main Organization name and select the Business Group that you want. In this case I will start with the “Australia” business group.

Before continuing, make sure that this is reflected at the top right.

• Then, at the vertical menu of Access Management, click on Users.
• Click the blue “Invite User” button.

• Enter the email of the user that you want to invite for the Australia Business Group. Then, add any Roles you want to grant to this user. These roles will only apply to the current selected Business Group (i.e. Australia). Click Send invitation when done.

• This is going to generate an email to the user with a link to Accept the invitation.

Note: If the invitee has used that same email on another MuleSoft Anypoint account(s), I would recommend signing up and creating a new account.

• Once the person accepts the invitation, as an administrator, it will appear in the list of Organization Users.

• Click on the new user’s username link to further tune his list of privileges. For example, I will also add the ability to access the Design Center in order to be able to create API specifications for example.

I would recommend that you click on each of the Permission tab sections to make sure that the user has the full list of required privileges.

• Repeat the steps if you need to add any other privileges and/or users to this or any other Business Group.

• From this moment onwards,  the new user will be able to have full access, as per the given roles and privileges on a specific Business Group.

• For example, based on the given roles and privileges, this new user will be able to create API specs within the “Australia” Business Group.

• However, if this user clicks at the top right on its Business Group, he/she will only see the “Australia” business group that was assigned to. That is, there is no mention of “New Zealand” group.

Congratulations! We just managed to successfully segregate our teams across Business Groups, as well as control the resources that are consumed on each of them.

I hope you found this article useful. If you have any question or comment, feel free to reach me at https://www.linkedin.com/in/citurria/