How to move group permission from one environment to other environment in AEMaaCS | Community
Skip to main content
Mario248
Level 7
March 3, 2023

How to move group permission from one environment to other environment in AEMaaCS

  • March 3, 2023
  • 4 replies
  • 3585 views

I have created around 15 groups and added permissions to the Dev environment in AEM(AEMaaCS). Now I want to move them to the production and staging environments. Can I create a package of this filter /libs/cq/core/content/nav/tools/security and use it in another environment?

Can anyone tell me how to move group permissions from one environment to another in AEMaaCS?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

4 replies

krishna_sai
Community Advisor
Community Advisor
March 3, 2023

@mario248 you can make use of ACL packager from acs commons.

http://www.aemcq5tutorials.com/tutorials/migrate-users-and-groups-with-acl-permissions-in-aem/

Hope this helps,
Krishna

Mario248
Mario248Author
Level 7
March 3, 2023

I guess ACL packager is not compatible on AEMaaCS. it supports on AEM onprem and AMS.

Kiran_Vedantam
Community Advisor
Community Advisor
March 3, 2023

Hi @mario248 

 

Please check this doc for user management: https://www.linkedin.com/pulse/aem-cloud-service-migration-user-management-via-admin-kumar/

 

Hope it helps!

Thanks,
Kiran Vedantam.

Rohit_Utreja
Community Advisor
Community Advisor
March 3, 2023

@mario248 

 

It can be done be uing netcentric access control tool. It is compatible with AEMaaCS. Please find below the link
https://github.com/Netcentric/accesscontroltool

 

I hope it helps.

Mario248
Mario248Author
Level 7
March 6, 2023

Rihit - Netcentric seems interesting. I hope this works in AEMaaCS. This https://github.com/Netcentric/accesscontroltool does not have much detailed information and I could not find much details on google as well. Can you share more reference and article on how to use netcentric access control tool?

Rohit_Utreja
Community Advisor
Community Advisor
March 6, 2023

Please fine below a related article describing it in detail.

https://blogs.perficient.com/2020/04/23/getting-started-with-the-netcentric-access-control-tool/

 

Yes, netcentric tool is compatible with AEMaacs, I have used it in my recent experience.

aanchal-sikka
Community Advisor
Community Advisor
March 4, 2023

Hello @mario248 

 

Repo init scripts might be a good option to explore. Reference: 

One Tool to Configure Them All: Sling RepoInit / Blogs / Perficient

 

With Sling Repoint, we have a consolidated grammar to:

  • Create groups
  • Assign permissions
  • Create paths
  • Set properties
  • Assign group membership
  • Create OSGi configurations
  • Create service users

It won't migrate the current Dev to all other environments. But, if set once as OSGi configs, can be deployed across all environments.

 

These scripts can also be used to set permissions in the immutable areas of AEM as a Cloud Service.

 

The Netcentric ACL tool or AEM packages will not allow to set permissions in immutable areas.

Aanchal Sikka
Mario248
Mario248Author
Level 7
March 7, 2023

Thanks for the detailed information. It helps me to understand the limitation of AC tool.