Azure API Management Usage Pattern for Enterprise - Grouping APIs

Consider the following scenario:
I have a 100 people in one org with 4 divisions
I create on Azure API Management instance
All 100 people are developing APIs and adding them to this single API management instance
Can I achieve following? If yes, how?
I want to group the APIs by those 4 division. Allow access of APIs only if it is added by people in their division. When I say allow access, basically I mean search the APIs and call the APIs.

You can achieve this by using "Groups". First, you need to have a group per division. You can either manually create the groups and add users to them or if you use Azure Active Directory and enable developers to login with AAD to the portal, then
their existing group membership will also be available to use.
Once you have the group set up you need to have a product for each group. You can set the visibility settings of the product so that only members of a given group can see it. Then you can set which APIs the product contains and thus complete the mapping
of groups to APIs.

Similar Messages

  • Import Manager Usage : Approaches for developing Import file structure and text validations

    Hi Experts,
    We are having 50+ import maps. We have provided option to users to drop the files for data import. Currently Import Manager(7.1 Sp08) does not have capability of pre-import validation of file data such as
    a. file structure - number of columns specific to import map
    b. file text validations - special characters, empty lines, empty cells
    c. Uniqueness of the records in the file
    For this, we are planning to build temporary folder(port specific) in which user drops in the file. We use the custom development to do above mentioned validations and then move the files to actual import ports.
    Please let us know if you have worked on similar requirements and how you have fulfilled such requirements.
    Regards,
    Ganga

    Hi Ganga,
    Assuming you have a well defined xsd and are getting valid xmls from source in the Inbound Port of MDM. Also,you have a Primary key in form of External ID (say).
    So just by making and defining a XSD you get most of what you want in your questions a and b.
    Now if you wish to use PI to drop files in the inbound port then you can build all the validations in PI itself and you would not need Staging table.
    Otherwise,you can have another table (preferably Main table) in the same repository or other dummy repository where records are created on import based on External ID.
    Here you can launch an MDM workflow on import of these records and run assignments to replace unwanted characters and Validations to give error for rejecting some records based on the data quality level desired.Once unwanted characters are removed and data is validated it can be syndicated using a syndication step in the Workflow.So records which fail are not sent and which pass are sent to a outbound port.
    From the outbound port PI or some other job can pick the file from this outbound folder and drop to Inbound folder of the same repository which imports to the required Primary Main table.Here again you have the option to leverage validations in PI and further check if data is fine.
    Once this activity is done you can delete the records from the staging table.
    Thanks,
    Ravi

  • My COmpanies Volume licsensing is a bit confusing and i'm unable to manage my licenses for my group . I would like access to LWS

    Please help

    Try a reset:
    Reset: Press the Home and On/Off buttons at the same time and hold them until the Apple logo appears (about 10 seconds).

  • Managing updates for different groups

    Hi
    I have installed WSUS on a Server 2008 R2 VM and have configure WSUS computer groups using group policy. These groups have all updated and I can see the computers in there containers within WSUS.
    Does anyone have any advice on how to manage the updates for each group?
    I am just a bit confused, when I click on the updates section of the WSUS console and show all updates, how do I know what updates have been approved for what group of computers already?
    Thanks in advance
    Shane

    Hi Shane,
    We can use Update View.
    We can filter updates by classification, product, the group for which they have been approved, and synchronization date. We can sort the list by clicking the appropriate column heading in the title bar.
    To create a new update view, please follow the steps below,
    In the WSUS administration console, expand the Updates node, and then click
    All Updates.
    In the Actions pane, click New Update View.
    In the Add Update View window, under
    Step 1: Select properties, select the properties you need to filter the update view:
    Select Updates are in a specific classification to filter on updates belonging to one or more update classifications.
    Select Updates are for a specific product to filter on updates for one or more products or product families.
    Select Updates are approved for a specific group to filter on updates approved for one or more computer groups.
    Select Updates were synchronized within a specific time period to filter on updates synchronized at a specific time.
    Select Updates are WSUS updates to filter on WSUS updates.
    Under Step 2: Edit the properties, click the underlined words to pick the values you want.
    Under Step 3: Specify a name, give your new view a name.
    Click OK.
    Your new view will appear in the tree view pane under Updates. It will be displayed, like the standard views, in the center pane when you select it.
    Best Regards.
    Steven Lee
    TechNet Community Support

  • Unable to do usermapping for the group in the Enterprise portal

    Hi All,
    I am unable to do usermapping for the group in the Enterprise portal.
    The system connection is maintained, with the user management as UIDPW and user,admin.
    User mapping is possible with my user but not for a <b>group</b>.
    Please suggest.
    Thanks
    Thulasi

    Hi
    According to my knowledge I dont think it is possible to do usermapping for the group.
    Please go through the link:
    http://help.sap.com/saphelp_erp2004/helpdata/en/af/f71940d4558f5ce10000000a155106/content.htm.
    Regards
    Victoria

  • Re: pattern for persistance management: the solution?

    Thanks to Forte France consulting group and Marc Sonnet (Forte
    France), here is one solution for our problem.
    We don't have test it yet but this seems pretty good.
    thanks for all your replies,
    Corinne Barbat
    ____________________________ S&eacute;parateur R&eacute;ponse ________________________________
    Objet : Re: Bloated clients (was: pattern for persistance management
    Auteur : [email protected] &agrave; _INTERNET
    Date : 23/10/98 00:41
    Geoff,
    Fromhat I've understood of Forte's partitioning behaviour, the only
    way to get rid of b, c, d and e Projects from the client partition is by
    deploying them as a shared library and having the Client dynamically
    load them at run-time. Any other way, including creating a complex
    structure of interfaces to avoid the client referencing the other
    projects directly, or even deploying the Server projects as another
    Application, will not prevent these projects from being included in the
    Client Partition.
    The problem I guess is that when we think along the lines of components
    we immediately associate them with Service Objects. Clearly, it's the
    Project and not the SO which can be classified as a component in Forte.
    The questions I have is : Now that we know how Forte's Partioning
    mechanism works, would it significantly impact the way we partition our
    Apps ? I'm not so sure.
    Eric
    ----Original Message Follows----
    Date: Thu, 22 Oct 1998 14:52:29 -0400
    From: Geoff Puterbaugh <[email protected]>
    To: [email protected]
    Subject: Bloated clients (was: pattern for persistance management)
    Reply-To: Geoff Puterbaugh <[email protected]>
    This topic is of keen interest to me as well. At my customer's
    urging, I wrote a little test application spread across
    four or five projects, each supplying the next..
    a << b << c << d << e
    The projects b,c,d, and e each contain a class and a service
    object based on that class. I partitioned it (a client
    partition and four server partitions for b c d e) and made
    a distribution. Then I looked at the client partition
    and discovered b c d e were projects for it!
    If you code-generate this and run fcompile, you will see
    that all the code for all the projects in the entire chain
    of supplier projects winds up in the client partition.
    To be clear about this, if project e contains a class X,
    you will see the source code for X.init and all other
    X methods in the client partition.
    This appears to be the default behavior, and the open
    question is how to change the default behavior, if that
    can be done.
    All my best,
    Geoff
    P.S. If e uses GenericDBMS as a supplier, it will show up
    in the client too. Of course!
    This is at least my understanding as of today.
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>
    Get Your Private, Free Email at http://www.hotmail.com
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

    Thanks to Forte France consulting group and Marc Sonnet (Forte
    France), here is one solution for our problem.
    We don't have test it yet but this seems pretty good.
    thanks for all your replies,
    Corinne Barbat
    ____________________________ S&eacute;parateur R&eacute;ponse ________________________________
    Objet : Re: Bloated clients (was: pattern for persistance management
    Auteur : [email protected] &agrave; _INTERNET
    Date : 23/10/98 00:41
    Geoff,
    Fromhat I've understood of Forte's partitioning behaviour, the only
    way to get rid of b, c, d and e Projects from the client partition is by
    deploying them as a shared library and having the Client dynamically
    load them at run-time. Any other way, including creating a complex
    structure of interfaces to avoid the client referencing the other
    projects directly, or even deploying the Server projects as another
    Application, will not prevent these projects from being included in the
    Client Partition.
    The problem I guess is that when we think along the lines of components
    we immediately associate them with Service Objects. Clearly, it's the
    Project and not the SO which can be classified as a component in Forte.
    The questions I have is : Now that we know how Forte's Partioning
    mechanism works, would it significantly impact the way we partition our
    Apps ? I'm not so sure.
    Eric
    ----Original Message Follows----
    Date: Thu, 22 Oct 1998 14:52:29 -0400
    From: Geoff Puterbaugh <[email protected]>
    To: [email protected]
    Subject: Bloated clients (was: pattern for persistance management)
    Reply-To: Geoff Puterbaugh <[email protected]>
    This topic is of keen interest to me as well. At my customer's
    urging, I wrote a little test application spread across
    four or five projects, each supplying the next..
    a << b << c << d << e
    The projects b,c,d, and e each contain a class and a service
    object based on that class. I partitioned it (a client
    partition and four server partitions for b c d e) and made
    a distribution. Then I looked at the client partition
    and discovered b c d e were projects for it!
    If you code-generate this and run fcompile, you will see
    that all the code for all the projects in the entire chain
    of supplier projects winds up in the client partition.
    To be clear about this, if project e contains a class X,
    you will see the source code for X.init and all other
    X methods in the client partition.
    This appears to be the default behavior, and the open
    question is how to change the default behavior, if that
    can be done.
    All my best,
    Geoff
    P.S. If e uses GenericDBMS as a supplier, it will show up
    in the client too. Of course!
    This is at least my understanding as of today.
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>
    Get Your Private, Free Email at http://www.hotmail.com
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

  • Retrieving billing/usage through Azure API

    I'm looking to retrieve my account usage details through Azure API but couldn't find the relevant API for that.
    I know I can download the CSV file of usage details in Azure Portal Account->Subscriptions->Download Usage Details, and would need to retrieve the same through API.
    Any help is appreciated. Thanks in advance.

    Hi ksrishna,
    Thanks for your posting!
    Currently we don't got the billing usage file using API. You could download in the account page on the portal. Also, you could vote this feature via this customer feedback page:
    http://feedback.azure.com/forums/170030-billing/suggestions/1143971-billing-usage-api
    Regards,
    Will
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Azure API Management - external endpoints

    Hi,
    I'm trying to implement the following scenario by using the preview Azure API management.
    I have a Web API, hosted in an OnPrem IIS. I want to expose this API via the Azure API Management.
    How can I manage exposing an OnPrem endpoint? Must I first be sure that my existing OnPrem API is published on the Internet? Or can I use a Service Bus Relay endpoint?
    Thanks.

    Hi David,
    Thanks for posting!
    Base on my understanding, If your website is hosted on-permission( Intranet), you need expose the endpoints for Azure API management , and you need use the http or https endpoints for this feature. You could use azure service bus service to expose
    your endpoints like this blog (http://blogs.msdn.com/b/paolos/archive/2013/10/24/how-to-integrate-a-windows-azure-web-site-with-a-lob-app-via-a-service-bus-relay-service.aspx
    ) and this thread  (http://stackoverflow.com/questions/9626386/relay-webhttprelaybinding-to-webapi-service ), Also, you could publish the site on internet
    and use the API url (http://blogs.iis.net/tomkmvp/archive/2010/02/03/how-do-you-access-iis-behind-a-nat-router.aspx ).If I am misunderstanding , please
    let me know free.
    Regards,
    Will
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Azure API Manager ALM

    Would like some good documentation on best practices for ALM with Azure API Manager. 
    For example...
    How do people have their DEV/TEST/PROD environment setup and how do you deploy changes?
    We are thinking about using the dev teir for our development and test environmnet and then the standard version for production. Are we on the right path?

    Hi Dan, you are definitely on the right path.
    Besides, below features might be useful to help you manage your environments:
    1. Management Rest API: this is useful if you want to manage your environment programmatically.
    http://msdn.microsoft.com/en-us/library/azure/dn776326.aspx
    2. Backup/Restore: http://azure.microsoft.com/en-us/documentation/articles/api-management-howto-disaster-recovery-backup-restore/
    Please let us know if you have any questions.
    Regards,
    Miao

  • Azure API Management developer portal runtime error

    Hi,
    I'm trying to use the Microsoft Azure API Management functionality just announced in the TechEd 2014 americas.
    I was able to create my namespace for Azure API Management in the Azure Mgmt Portal.
    But now, when I click on the Management Console or Developer Portal, I got a runtime error (ASP.Net Runtime Error).
    I tried from a PC where I'm not authenticated in Azure and it works until I reach the login page, and then I got this Runtime Error again and again.
    My subscription is a MSDN subscription.
    Any ideas or workarounds here?

    Hi,
    The problem still exists but it appears only when I'm authenticated.
    For example, I open the Windows Azure Management Portal with my admin account, goes to the API Management and click on the Management Console. I'm redirected to the https://middleway.portal.azure-api.net/admin URL and here I got a Runtime Error ASP.Net...
    Strange no?

  • How to setup Traffic Manager with Azure API Management

    Hello-
    I have been trying to configure traffic manager as a Failover mechanism for Azure API Management (not sure if this is the correct terminology). 
    The gist is this: I have configured Azure API management to point to a set of Web API's hosted in a Cloud Service. I would like to use Traffic Manager as a Failover mechanism to route requests to a different data center, should the primary service becomes
    unresponsive or goes into a degraded state. 
    When going through the portal, there is no selection that is available to configure API Management/Web API: the selections are Cloud Service and Web apps.
    I've also looked into th Powershell Add-AzureTrafficManagerProfile using the -Type ["Any"] option with same result - it adds the endpoint but it is in a "Degraded" state.
    I need to understand the correct way to accomplish this - I'm pretty sure I'm doing something wrong.
    gigabit

    Hi Shaun,
    For most Traffic Manager applications, endpoint health is probed in the same way on each endpoint.  That's why Traffic Manager profiles have endpoint monitoring settings configured at the profile level, not the endpoint level.
    It appears your case is an exception--you need to configure a different monitoring path for each of your endpoints.  To do this, you should use
    'nested' Traffic Manager profiles.  Create a child profile for each endpoint (with endpoint monitoring settings particular to that endpoint) and then join them in a parent profile.  Endpoint health will propagate up from child to parent and should
    give the behaviour you're looking for.
    There's no downside: We bill only for the actual monitored endpoints and actual queries received (so no extra costs), and the parent-child link will be unwound within the Traffic Manager name servers (so no extra latency).
    Regards,
    Jonathan Tuliani
    Program Manager
    Azure Networking - DNS and Traffic Manager

  • Custom Azure solutions using ADFS and SPO permissions group for ACL?

    This is a stretch, but say we have a custom ASP.NET website in Azure we hope/plan to secure with ADFS. Possible somehow to use SPO Permission groups to manage those permissions?
    Basically what we are trying to do is move some custom functionality outside of SharePoint to Azure, but we would like SPO Permission groups to determine who can run those external solutions.

    I"m not sure what will happen with users creating directories. Generally if you use mkdir -p to create a new directory it will inherit the permissions of the parent folder.
    I'm not sure how finder will handle this. Maybe you can use automator to look for new directories and modify the permissions on them.

  • How do I create a new emkey for Enterprise Manager Database Control?

    Hi,
    I just installed 11gR2.
    I am evaluating it.
    How do I create a new emkey for Enterprise Manager Database Control?
    I tried various combinations of this command:
    emctl config emkey
    I did find a probable bug:
    $ emctl config emkey -emkey -emkeyfile emkey.ora -force -sysman_pwd he11ow0rld
    Oracle Enterprise Manager 11g Database Control Release 11.2.0.1.0
    Copyright (c) 1996, 2009 Oracle Corporation. All rights reserved.
    Undefined subroutine &EmKeyCmds::promptUserPasswd called at /u2/app/oracle/product/11.2.0/dbhome_1/bin/EmKeyCmds.pm line 160, <FILE> line 3.
    $
    Again,
    How do I create a new emkey for Enterprise Manager Database Control?
    I do have a copy of my old key but it is no longer good because I reinstalled the repository with these commands:
    emca -repos drop ...
    emca -repos create ...
    Oh, and where is emctl "documented".
    I poked around in some book-index links and with the search engine.
    I could not find anything.
    Thanks,
    -Janis

    user11892726 wrote:
    Oh, and where is emctl "documented".
    http://download.oracle.com/docs/cd/B16240_01/welcome.html

  • The OMS is not set up for Enterprise Manager Security

    Hi, I'm trying to add an agent to grid control and its not connecting with the management server because i cant secure it...
    bash-2.05$ ../../bin/emctl secure agent <password>
    Oracle Enterprise Manager 10g Release 3 Grid Control 10.2.0.3.0.
    Copyright (c) 1996, 2007 Oracle Corporation. All rights reserved.
    Agent is already stopped... Done.
    Securing agent... Started.
    Requesting an HTTPS Upload URL from the OMS... Failed.
    The OMS is not set up for Enterprise Manager Security.
    i have tried this on two seperate servers, both do the exact same thing. However, on my repository server where the OMS is housed, i can secure the agent no problem. Does anyone know what the problem could be? My OMS is on a Linux (SuSE 10.2) 32-bit machine.
    heres the emdctl.trc on the agent machine:
    2007-07-11 11:00:20 Thread-1 ERROR main: nmectla_agentctl: Error connecting to http://cbldb3:3872/emd/main/. Returning status code 1
    2007-07-11 11:00:21 Thread-1 WARN http: snmehl_connect: connect failed to (cbldb3:3872): Connection refused (error = 239)
    2007-07-11 11:00:21 Thread-1 ERROR main: nmectla_agentctl: Error connecting to http://cbldb3:3872/emd/main/. Returning status code 1
    2007-07-11 11:00:21 Thread-1 WARN http: snmehl_connect: connect failed to (cbldb3:3872): Connection refused (error = 239)
    2007-07-11 11:00:21 Thread-1 ERROR main: nmectla_agentctl: Error connecting to http://cbldb3:3872/emd/main/. Returning status code 1
    2007-07-11 11:00:22 Thread-1 WARN http: snmehl_connect: connect failed to (cbldb3:3872): Connection refused (error = 239)
    2007-07-11 11:00:22 Thread-1 ERROR main: nmectla_agentctl: Error connecting to http://cbldb3:3872/emd/main/. Returning status code 1
    2007-07-11 11:05:10 Thread-1 WARN http: snmehl_connect: connect failed to (cbldb3:3872): Connection refused (error = 239)
    2007-07-11 11:05:10 Thread-1 ERROR main: nmectla_agentctl: Error connecting to http://cbldb3:3872/emd/main/. Returning status code 1
    2007-07-11 11:10:08 Thread-1 WARN http: snmehl_connect: connect failed to (cbldb3:3872): Connection refused (error = 239)
    2007-07-11 11:10:08 Thread-1 ERROR main: nmectla_agentctl: Error connecting to http://cbldb3:3872/emd/main/. Returning status code 1
    bash-2.05$ lsof | grep 3872
    bash-2.05$
    seems to be failing the connect but nothing is running on the port so i'm not sure why
    Thanks in advance
    Message was edited by:
    user581869

    some further information and hopefully someone can help me...
    I went to the OMS binary folder (fmc45712:$OMS_HOME/bin) and executed the following commands...
    $OMS_HOME/opmn/bin/opmnctl stopall
    $OMS_HOME/bin/emctl stop oms
    $OMS_HOME/bin/emctl secure oms
    $OMS_HOME/bin/emctl start oms
    $OMS_HOME/opmn/bin/opmnctl startall
    then i go to $AGENT_HOME on the OMS machine (fmc45712:$AGENT_HOME/bin) and execute..
    $AGENT_HOME/bin/emctl status agent -secure
    Oracle Enterprise Manager 10g Release 3 Grid Control 10.2.0.3.0.
    Copyright (c) 1996, 2007 Oracle Corporation. All rights reserved.
    Checking the security status of the Agent at location set in /opt/oracle/OracleHomes/agent10g/sysman/config/emd.properties... Done.
    Agent is secure at HTTPS Port 3872.
    Checking the security status of the OMS at http://fmc45712:4889/em/upload/... Done.
    OMS is secure on HTTPS Port 1159
    I then to go the server i deployed the agent on that i want to get communicating wtih my OMS...
    $AGENT_HOME/bin/emctl status agent -secure
    Oracle Enterprise Manager 10g Release 3 Grid Control 10.2.0.3.0.
    Copyright (c) 1996, 2007 Oracle Corporation. All rights reserved.
    Checking the security status of the Agent at location set in /u101/em/agent10g/sysman/config/emd.properties... Done.
    Agent is unsecure at HTTP Port 3872.
    Checking the security status of the OMS at http://fmc45712:4889/em/upload/... Done.
    OMS is running but has not been secured. No HTTPS Port available.
    same command, different computer, but on the same network, and it just doesn't work. The OMS is on Linux x86 and the agent on the alternate computer is on HP-UX. If anyone has any help it'd be much appreciated.

  • Enterprise manager Grid Control for Windows 64 bit

    Hi,
    I am looking for Enterprise Manager Grid Control 10.2.0.3 for Microsoft Windows Server 2003 R2 64 bit. On OTN and metalink I can only find for 32 bit. Can anyone suggest where I can find the same.
    Thanks in Advance.
    SK.

    The OMS is on Win x86 and supports Agent on Win x64 target.

Maybe you are looking for

  • Trying to capture DV tape footage - "File Error: Unknown file."

    I have been using FCE for a long time - have a Mac Pro - 4 HD's and its hooked up to to a Sony GV-D1000 player by firewire. I have captured hundreds of tapes over the years and now I can't. I get the above message. I shoot on a Sony PD170. The only c

  • ITunes.exe - Entry Point Not Found after reinstall

    OK so I am using Windows XP, 32bit machine but it does 99% of my work Said yes to iTunes 12.1 update, iTunes nolonger runs on PC but pops up a warning window iTunes.exe - Entry Point Not Found The procedure entry point CMTimeConvertScale could not be

  • HandleCrystalEvent failed

    I am able to preview all of my reports in the CMC when you hit preview,  But when I try to refesh any of my reports I am getting this error: CrystalReportViewer handleCrystalEvent failed Unable to retrieve Object. The database logon information for t

  • DML with sqlj in app.module

    I do DML with the help of stored pl/sql procedures (in packages), and I'm building a bc4j application. I do custom doDML methods for the entities, and I would like to get use of the generated sqlj wrapper classes for my stored packages. Is this possi

  • Selection Criteria in Check/Payment Lot configuration

    Hi Gurus, I need help in populating the values in "Selection Category 1,2,3" fields. While configuring the Payment /Check/Credit card lots, the selection criteria (BP,CA and DOC) values are not populating to select the values. The pre selection field