System user and content deployment in AEM as a Cloud...

[Prince_Shivhare]

Hello Everyone,

I am currently working on an AEM as a cloud service.

Where we have adobe cloud git repo. and limited access to higher environments.

now we have a requirement to create system users in AEM and also content deployment.

But we don't have access to crx/explorer and  CRX package manager.

Can anyone please help me to know about this in detail?

I read this article -  https://sling.apache.org/documentation/bundles/repository-initialization.html
but not able to understand anything.

Thank you

[Asutosh_Jena_ · Accepted solution]

Hi @Prince_Shivhare 

To create the system user you can leverage the Repo Init service i.e. create an OSGi config under the deafult run mode with the below name:

org.apache.sling.jcr.repoinit.RepositoryInitializer-projectname.config and add the following content to it. You can customize as needed and once the code is deployed the system user will be created and required permission will be set.

scripts=[
        "
        create service user demo-user
        set ACL on /content/project
        allow jcr:read for demo-user
        end
        "
]

Now coming to Content Deployment which can be done in both Cloud Manager as well as Package Manager. Please see the link below for more details:

https://experienceleague.adobe.com/docs/experience-manager-cloud-service/implementing/deploying/over...

Hope this helps!

Thanks

[Prince_Shivhare]

But I need a write access as well because we will save the file /etc/customnode node as well.

[Prince_Shivhare]

I created in this way -- XML file

<?xml version="1.0" encoding="UTF-8"?>
<jcr:root xmlns:jcr="http://www.jcp.org/jcr/1.0" xmlns:sling="http://sling.apache.org/jcr/sling/1.0"
    jcr:primaryType="sling:OsgiConfig"
    scripts="[ create service user systemuser
                set ACL on /etc/productfeed
                allow jcr:read , rep:write for systemuser
                end ]"/>

[Asutosh_Jena_]

Hi @Prince_Shivhare 

Please see the below screenshot:

replace aem65app with your project name.

Thanks!

[Prince_Shivhare]

thanks bro, lets see if it works on higher environment.

[Jaideep_Brar]

You need to create a cfg.json OSGI config for repo init to create system users and assign permissions. See docs below:

[1] https://experienceleague.adobe.com/docs/experience-manager-cloud-service/implementing/developing/aem...

[Shashi_Mulugu]

@Prince_Shivhare you can also use ACS commons Ensure Service Users

https://adobe-consulting-services.github.io/acs-aem-commons/features/ensure-service-users/index.html