Process credentials and impersonation

2 minute read

You apply credentials and impersonation to control who can deploy applications or microservices and where the applications or microservices are deployed.

  • You can attach one or more credentials to component, application, or microservice process steps.

  • You can use only one impersonation credential when running an application or microservice process, component process, or a process step.

  • When you attach an impersonation credential in CloudBees Flow, it specifies the user who can deploy the application or microservice and the environment in which the application or microservice is deployed.

  • When you attach an impersonation credential to a platform-level object (such as a procedure), it specifies the account (user) that can run the job or job step. If you want to specify another condition, you have to attach another credential to the object.

When you impersonate using a credential, make sure that the impersonated user has the absolute path to the bin directories in the $PATH environment. If you define a process step with a command, you must enter the absolute path in the Post Processor and Shell fields in the Define Step dialog box.

Click in the Add Credentials field. The Component Process Step / Add dialog box opens.

  • To impersonate one credential:

    1. Select Impersonate in the Type field.

    2. Click the Select Project field to select a project. You can select a credential from a project that is different than the one containing the application.

    3. Select the Select Credential field to open a drop-down list of credentials for the process step.

    4. Select a credential.

    5. Click OK.

      The Credentials dialog box now shows the one credential for impersonation.

  • To attach one or more credential parameters to the process step:

    1. Select Attach Parameter in the Type field.

    2. Click the Select Credential Parameter field to open a drop-down list of credentials for the process step.

    3. Select a credential.

    4. Click OK.

      The Credentials dialog box now shows the attached credentials

  • To attach one or more credentials to the process step:

    1. Select Attach in the Type field.

    2. Click the Select Project field to select a project. You can select a credential from a project that is different than the one containing the application.

    3. Click the Select Credential field to open a drop-down list of credentials for the process step.

    4. Select a credential.

    5. Click OK.

      The Credentials dialog box now shows the attached credentials.