Add a module to your tenant
To manage your tenant, please log in to the 'Access Management' UI.
This is a separate user interface, which you will only need to access for creating client access (for Postman), or for optional further management of users, roles, etc., in case you want, for example, to invite additional developers to your tenant.
The default UI includes some configurations for the Nexeed Industrial Application system.
In the context of Bosch Semantic Stack, do not worry about the Dashboards tab. The only relevant section for you is the 'Access Management'.
Navigate to Modules. This is the place where you can register your own application or solution as a module.
For example, we will make some REST-like requests from a Postman collection to save you time when trying out the APIs.
Such requests can either use Basic Auth with your username and password, or authenticate as a client – and thus will need the registration as a module.
To continue the getting started guide you will set up one client with credentials and secret that will be used by your Postman.
Click the blue + icon to get access to the 'Add a module' dialog.
Details – set all required fields, amongst which you can set the secret
The client ID is generated automatically and will be displayed at the end of this dialog.
User login – for now we disable it - that disables all other options on the dialog part.
Summary – displays the setting and gives you the possibility to go back to potentially change the entries.
Continue with Save.
Client Credentials – copy the Client ID and Client Secret to your key storage application and handle with care. The secret will never be visible again.
Click Close to save and finish.
Click the new module you have just created → the Details tab is displayed.
Click the tab Assigned Roles and you will see it is empty by default.
Click the big blue + icon.
Click the roles exposed by Digital Twin modules > confirm with Assign.
Result: your client will have all these roles and is allowed to request the Digital Twin Registry and the Aspect Model Catalog.
Get familiar with the OAuth flow. Example https://blog.oauth.io/introduction-oauth2-flow-diagrams/.
We will use the "Client Credential Grant Type Flow" in the further course of this guide.