Pre-migration
Before migrating to Bridge Automation Service (BAS), complete the required setup and access configuration tasks described in this section.
Prerequisites
Before using BAS, ensure that:
- The account is onboarded to the appropriate Kyndryl Bridge, and BAS is enabled. For more information, go to Onboarding and enabling Bridge AutomationOnboarding and enabling Bridge Automation.
- A user with the Bridge Platform Administrator role completes the prerequisite configuration tasks.
- Verify that the required automation access groups are available in Bridge IAM. The access groups typically begin with automation. Common access groups include:
- automation_admin or automation_administrator
- automation_editor
- automation_operator
- automation_viewer
Create dedicated CACF credentials
To allow BAS to access the CACF, create dedicated credentials for each organization or account.
- Follow the IAM process to obtain a Functional ID for BAS access to CACF. This task is typically performed by the Delivery Program Executive (DPE). For more information, go to Identity Management at Kyndryl.
- Sign in to Ansible Automation Platform (AAP) using the Functional ID. This step creates the AAP user profile associated with this ID.
- The Tower Account/Organization Administrator grants the required permissions to the AAP user profile.
- A Tenant Automation Administrator (TAA) can generate a token in AAP. BAS uses this token as the FID token to connect to AAP for a specific organization.
For assistance with creating a Functional ID or completing CACF-related tasks, contact the CACF team. For more information, go to, Automation Services Onboarding and Enablement.
Onboard a dedicated CACF connection as a Bridge credential
A user must have the Bridge Platform Administrator role to create connections in Bridge.
- From the main menu
, go to Administration → Connections Management.
- Select Tool Connections, and then select Add Connection.
- Configure the connection:
- Set Connection type to CACF.
- Under Supported apps, select Provisioning Orchestration and Automation.
- Enter a connection name using the following format:
<GSMA_CODE>@CACF_INSTANCE
Example: ace@devtest4
- Enter a description to identify the target environment (Optional).
- Click Next.
- Enter the endpoint URL and GSMA organization information.
Enter the endpoint URL and GSMA organization information.
- Click Next.
- Enter the authorization token. For more information, go to Create dedicated credentials for CACF.
- Click Next.
- Review the configuration details and click Submit.
Enable automation admin access group with admin role
- From the main menu , go to Access Management → Access Groups.
- Login as a user with the Bridge Platform Administrator role.
- Edit the automation_admin or automation_administrator access group.
- Assign the Orchestration Administrator role.
- Save the changes.