Prepare your account for migration

Overview

Before migrating to Bridge Automation Service (BAS), complete the required setup and access configuration tasks described in this section.

Prerequisites

Before using BAS, confirm the following:

The account is onboarded to the appropriate Kyndryl Bridge and BAS is enabled. For more information, see Onboarding and enabling Bridge Automation.

A user with the Bridge Platform Administrator role completes the prerequisite configuration tasks:

Verify that the required automation access groups are available in Bridge IAM. The access groups typically begin with automation. Common access groups include:

automation_admin or automation_administrator

automation_editor

automation_operator

automation_viewer

Create dedicated Client Automated Configuration Framework credentials

To allow BAS to access the Client Automated Configuration Framework Credentials (CACF), create dedicated credentials for each organization or account.

Follow the IAM process to obtain a Functional ID for BAS access to CACF. This task is typically performed by the Delivery Program Executive (DPE).The Delivery Program Executive (DPE) typically performs this task. For more information, go to Identity Management at Kyndryl.

Sign in to Ansible Automation Platform (AAP) using the Functional ID. This step creates the AAP user profile associated with this ID.

The Tower Account/Organization Administrator grants the required permissions to the AAP user profile.

A Tenant Automation Administrator (TAA) can generate a token in AAP. BAS uses this token as the FID token to connect to AAP for a specific organization.

For assistance with creating a Functional ID or completing CACF-related tasks, contact the CACF team. For more information, go to Automation Services Onboarding and Enablement.

Onboard a dedicated CACF connection as a Bridge credential

From the Kyndryl Bridge main menu Inline image , go to Administration → Connections Management.

Click Tool Connections, and then click Add Connection.

Configure the connection:

Set Connection type to CACF.

Under Supported apps, select Bridge Automation Service.

Enter a connection name using the following format: <GSMA_CODE>@CACF_INSTANCE Example: ace@devtest4.

Optional: Enter a description to identify the target environment

Click Next.

Enter the authorization token.

Click Next.

Review the configuration details and click Submit.

Enable automation admin access group with Admin Role

From the Kyndryl Bridge main menu Inline image , go to Access Management→ Access Groups.

Edit the automation_admin or automation_administrator access group.

Assign the Orchestration Administrator role.

Save the changes.