Where can I find the Cloud Foundry Admin User?

[danfqa]

Hello experts, I greatly appreciate your assistance in clearing up some questions for me. Mike Zaschka made the following comment:

https://answers.sap.com/questions/13004003/how-to-authenticate-cloud-platform-api.html?childToView=1...

His strategy was used by Vanessa Dayanc: to retrieve the Service Key information by calling the CF-API endpoint and to achieve building an IFlow that notifies when a service key is about to expire. I've been trying to locate the Cloud Foundry API administrator user, but I haven't been successful. From what I understand, this user is different from the global BTP Cockpit account, as I attempted to execute the process with that BTP user and received a 401 Unauthorized error. In my case, I opened a trial account in BTP, do you know where I can find that user to authenticate with Cloud Foundry and thus retrieve the necessary information to replicate what Vanessa did in her blog "Notification for Expiration of Service Keys (Certificates) in Cloud Foundry via iFlows on SAP Integration Suite"? Finally, is it necessary to use the cloud_controller API?

https://blogs.sap.com/2023/03/02/notification-for-expiration-of-service-keys-certificates-in-cloud-f...

Thank you so much!

[vishalakshmi]

Hello Daniel,

I understand that you have questions about retrieving Service Key information and authenticating with the Cloud Foundry API in the context of SAP Business Technology Platform (BTP) and replicating Vanessa Dayanc's blog post on "Notification for Expiration of Service Keys (Certificates) in Cloud Foundry via iFlows on SAP Integration Suite.

There isn't necessarily a single "administrator user" in the traditional sense. Access to Cloud Foundry resources is typically controlled through roles and permissions, which are managed by the organization and space administrators. If you need specific permissions to access and manage resources in Cloud Foundry, you should contact your organization or space administrator to grant you the necessary permissions. It's possible that Vanessa Dayanc's blog post refers to obtaining credentials or permissions from an administrator within her organization. When working with SAP BTP, you may need to authenticate with the Cloud Foundry environment associated with your BTP subaccount. Ensure that you are using the correct credentials (username and password or API token) associated with your BTP account to authenticate with Cloud Foundry. If you are getting a "401 Unauthorized" error, it's likely an issue with the credentials or permissions associated with your BTP trial account. You should reach out to SAP support or your organization's administrator to resolve this. The "cloud_controller" API is part of the Cloud Foundry API. It is used to manage Cloud Foundry resources such as applications, services, and organizations. In the context of Vanessa Dayanc's blog post, it's possible that the "cloud_controller" API is used to interact with Cloud Foundry resources to retrieve service key information. To replicate what Vanessa did in her blog, you would likely need to use Cloud Foundry's API, which includes the "cloud_controller" API, to retrieve the necessary information. to replicate Vanessa Dayanc's blog post, you need to ensure you have the correct permissions and credentials to access Cloud Foundry resources within your BTP trial account. If you encounter authentication issues, reach out to SAP support or your BTP account administrator for assistance. Additionally, you may need to use the Cloud Foundry API, including the "cloud_controller" API, to work with Cloud Foundry resources as described in the blog post.

Thanks,

Lakshmi.

[danfqa]

Hello, Lakshmi! Thank you very much for your support and excellent response.

Just as you mentioned, the idea is to retrieve the information from the service keys and be able to replicate what Vanessa did.

I want to let you know that through CF CLI, I've been able to assign permissions to my user at the organization and space levels. However, when I try to create a user, for example, I encounter the same authorization error 401.

I find it interesting and curious that I can access with my username and password here: `cf login -a https://api.cf.us10-001.hana.ondemand.com`, but not here: `https://login.cf.us10-001.hana.ondemand.com/oauth/token`, through CF CLI.

I'm sharing these images with you, and if you have any more ideas, I'd appreciate it if you could let me know.