Samples broken, can you add users and roles Tennant scope

[ridingmower]

Hello this is exactly what I was looking for a lot of the challenges are for users and roles scope by tenants.

I was not able to access the samples, can I request a sample to add a sample project with the pages to manage users and roles based on tenant.

In scenarios where there are subgroups besides roles and users and gets confusing with ASP identity for the developers, for e.g we have several groups with active directory that's pretty easy to manage but in ASP identity tenants and groups are kind of hard.

So I truly appreciate the tenants solution, however I don't know how to scope operations and transactions to tenants, can you please add a sample or a page with that where we can just drag and drop the finbuckle multitenant would help a lot, something a web admin/a analyst can do from the view/gui, not just for me but other developers as well.

Thanks

[AndrewTriesToCode]

Hi, which page had the bad link on it? I have some older samples but they are in GitHub branches for prior releases so if you change the branch or tag where it says main and go back a few versions you will see some examples from .NET 6 timeframe.

I have had time to update for .NET 8/9/10 but it’s on my list. Identity stuff is also more complex so the samples obviously aren’t the most realistic.

Quick question for you, in your use case would tenants be completely isolated for Identiry or would you have users who could belong to more than one tenant?

[maeneak]

All sample links are broken in the docs because there is no samples directory in the main branch anymore

[ridingmower]

Hello @AndrewTriesToCode , thanks for the response.

questions: Quick question for you, in your use case would tenants be completely isolated for Identity or would you have users who could belong to more than one tenant?

• Except for Super Admins, yes 90% of the case, users would belong to one tenant/silos.
• Overlapping users, rare: however, just an FYI there are scenarios where the same user from one tenant or vendor site could be added to another so that he could part of the reviewer. In this scenario, would it be easier to inherit permissions from both orgs/tenants or simply direct permissions.
• Also how are overlapping permissions handled so minimal permissions are only given.
• Default admin and user should be created/seeded for every tenant, when the Super Admin creates a new tenant during.
• Does each tenant have to be restarted when a new role is added by user in GUI? in ASP identity adding new permission roles, needs a code reboot to refresh which actions/have permissions.

Org & User management page could collectively organized to handle all these, I remember when we tried to do it with claims it turned out to be a mess. Partially many developers dont know how to implement because its a not clearluy understoor and not easy. Having this simplified to a turn key process to the GUI would drive easier adoption, if you look at wp, dnn and other sites that are easy to admin.

[AndrewTriesToCode]

Thanks for your reply.

Also how are overlapping permissions handled so minimal permissions are only given.
Not sure what you mean by this. Can you give me an example?

Does each tenant have to be restarted when a new role is added by user in GUI? in ASP identity adding new permission roles, needs a code reboot to refresh which actions/have permissions.
This depends on how you code it, but in general Finbuckle will work with how authorization already works with ASP.NET Core which means if you are using the Authorize attribute then an app restart is the only way to make changes take effect.

[VictorioBerra]

Second bringing back samples for .NET 8, 9.

Does the .NET 6 Identity samples work with .NET 9