jfrog-create-users-groups

JFrog Create Users & Groups

Prefer jf api (../../../platform-features/skills/jfrog-cli/jf-api-patterns.md); curl in checks below is fallback.

Creates users and groups on the JFrog Platform. Typically invoked during onboarding when the manifest references users or groups that do not yet exist, but can also be used standalone.

Inputs

• users -- list of users to create:

  users:
    - { name: alice, email: [email protected], groups: [backend-team] }
    - { name: bob, email: [email protected] }
  

• groups -- list of groups to create:

  groups:
    - { name: backend-team, description: "Backend developers" }
    - { name: devops, description: "DevOps team" }
  

• default_password -- password to set for newly created users (from manifest jfrog.default_password or prompted interactively)

Load Credentials

# Load .env if JFROG_URL or JFROG_ACCESS_TOKEN are not already set
if [ -z "$JFROG_URL" ] || [ -z "$JFROG_ACCESS_TOKEN" ]; then
  if [ -f .env ]; then
    set -a; source .env; set +a
  fi
fi

Workflow

1. Determine Default Password

The default password is required for creating new users. Resolve it in this order:

1. Manifest field: Read jfrog.default_password from the manifest YAML
2. Interactive prompt: If not in the manifest, ask the user to provide a default password

Password requirements: at least 8 characters, must include uppercase, lowercase, and a digit. Validate before proceeding.

2. Create Groups First

Groups must be created before users so that users can be assigned to groups during creation.

Check if group exists

jf api "/access/api/v2/groups/$GROUP_NAME" >/tmp/jf-cug-group.json 2>/tmp/jf-cug-group.code
HTTP_CODE=$(tr -d '\r\n' < /tmp/jf-cug-group.code)

• 200 = already exists, skip creation
• 404 = does not exist, proceed to create

Create a group (run with required_permissions: ["full_network"])