---
title: "Identity and Access Management Exercise"
canonical: "https://manual.cimon.com/space/AUR/4501536769/Identity%20and%20Access%20Management%20Exercise"
format: markdown
---
# > Macro (anchor)
**Exercise: Setting up Security**
- [Identity and Access Management Configuration](https://cimon.atlassian.net/wiki/spaces/AUR/pages/4501536769/Identity+and+Access+Management+Exercise#Identity-and-Access-Management-Configuration)
- [Identity and Access Management Runtime](https://cimon.atlassian.net/wiki/spaces/AUR/pages/4501536769/Identity+and+Access+Management+Exercise#Identity-and-Access-Management-Runtime)
## **Identity and Access Management Configuration**
1. First, we’ll create a **permission**. To start, Click on **Tools **> **Identity and Access Management**. Click on **Permissions **and click the **+** to begin creating a new permission. Name the permission as “Allow interaction”.
2. Next, we’ll create a **user**. Select the **Users** tab. Once selected, click on the **+** to begin the creation of a new user. Start with the **Username **being “User”. Click **Edit User Password** and enter “123” into both fields. Click **OK **to confirm the password is set. Once the password is set, click the **Log off action field > Create new Command**. Click **Add New Command**, and select **Send Screen Notification**. Have the **Message** be “Successfully logged out!”. Click **OK** to exit out. By following the same steps, create another user name, “User2”. Have the User Password also be “123”.
3. Now, onto creating a **Group**. To begin, click on the **Groups** tab to start creating a group. Name the group “Group 1”. Under **Users,** click **Edit** and add “User” to the group. Do not add User2. Click **OK** to confirm the changes. Under **Permissions**, add the “Allow Interaction” permission by clicking on **Edit** underneath Permissions. Click **OK** to confirm the changes. Once out of the permissions edit page, click **OK** to save all changes and create the group. Finally, click **OK** to exit the **Identity and Access Management **Window.
4. Now, create a Rectangle. Select it, go into Appearance, and change the Fill to Sea Green or #008080. Then select **Actions** under **On Press** to create a New Command. Select the Command “Open Login Window.” Make sure the **Show User List** is unchecked. Click **OK** to confirm it.
5. Now, create a **Circle** above the Rectangle. Change the fill to Purple or #800080. Then select **Actions** under **On Press** to create a New Command. Select the Command “Logout User”.Click **OK** to confirm it.
6. Now, create a **Circle** to the right of the Rectangle and the circle. Change the fill to Red or #ff0000. Then select **Actions** under **Permissions** and click the **pen **to add permissions. Click the **Checkbox **next to allow interaction. Click **OK **to confirm it. Under **On Press** to create a New Command. Select the Command “Send Screen Notification.” Have the **Message** be “User has sufficient Permission!” Click **OK** to confirm it. Click
## **Identity and Access Management Runtime**
1. Click** Tools** >**Launch Simulator** to launch the Canvas Simulator.
2. Click on the Red Circle; there should be a notification that the user does not have permission. This is how objects with permission will interact with users who are not logged in.
3. Click on the Rectangle to open the Login Window; once it is open, type in “User” into **Username** and “123” into **Password**. Click **OK** once all of that has been entered. Once Logged in, Click the Red Circle, and the Screen Notification set up earlier should now display.
4. Log out of User 1 by clicking the purple circle. Then log into “User2” with the password “123”.
5. Now try clicking the Red Circle. Notice how the insufficient Permission notification came up again; this is due to User2 not having permission tied to the account and not being connected to Group 1, which also has permission tied to it.
##### [Back to the top of the Identity and Access Management Exercise](#top).