Your first login to Bosch Semantic Stack

At this point we assume you have received a confirmation email from the Bosch Semantic Stack support team containing the tenant ID for your subscription.

The tenant ID is important to know whenever you try to log in as user to one of the user interfaces.
In fact, there are two URLs where you can log in:

For the Digital Twin Registry and the Aspect Model Catalog web apps:
https://workspace.bosch-semantic-stack.com/?tenant=<your-tenant-id>
For the Multitenant Access Control portal
https://portal.bosch-nexeed.com/user-management/users?tenant=<your-tenant-id>

Compose these URLs by replacing <your-tenant-id> with the number received via email. Store the URLs in your key vault where you keep the password for your SingleKey ID - as only this user was granted permission to access the tenant’s data.

Take your time for a short, guided tour on the different UIs.

Digital Twin Registry UI

The Digital Twin Registry hosts the digital twins of your assets on a cloud infrastructure. You will be able to manage the digital twins registered for your tenant.

Log in with SingleKey ID at https://workspace.bosch-semantic-stack.com/?tenant=<your-tenant-id>
The UI shows the current registered digital twins.

Right now there is not much to see, but you will learn how to populate your tenant with digital twins and aspects at Setup a demo scenario.

Digital Twin Registry for Twins:

Name Description Role key

Name	Description	Role key
Twin Viewer	Required to see the application and its contents in your tenant’s workspace. With only that role, users can browse the Digital Twin Registry for Twins.	`VIEWER`
Twin Manager	Additionally, with this role, users have Write permissions for Twins.	`TWIN_MANAGER`
Aspect Operator	With this role, users have Write permissions for the Aspect APIs of the Twins.	`ASPECT_OPERATOR`

Twin Viewer

Required to see the application and its contents in your tenant’s workspace.
With only that role, users can browse the Digital Twin Registry for Twins.

VIEWER

Twin Manager

Additionally, with this role, users have Write permissions for Twins.

TWIN_MANAGER

Aspect Operator

With this role, users have Write permissions for the Aspect APIs of the Twins.

ASPECT_OPERATOR

Digital Twin Registry for Asset Administration Shells:

Name Description Role key

Name	Description	Role key
AAS Viewer	Required to see the application and its contents in your tenant’s workspace. With only that role, users can browse the Digital Twin Registry for Asset Administration Shells.	`AAS_VIEWER`
AAS Manager	Additionally, with this role, users have Write permissions for Asset Administration Shells.	`AAS_MANAGER`
Submodel Access Reader	With this role, users have Read permission for the AAS submodel-descriptor access endpoint. Only required for Eclipse Dataspace Connector (EDC) clients.	`SUBMODEL_ACCESS_READER`
AAS EDC BPN Viewer	With this role, users have access-controlled Read permission for AAS resources in combination with EDC-BPN Header. Resource visibility depends on defined access rules. Only required for Eclipse Dataspace Connector (EDC) clients.	`AAS_EDC_BPN_VIEWER`

AAS Viewer

Required to see the application and its contents in your tenant’s workspace.
With only that role, users can browse the Digital Twin Registry for Asset Administration Shells.

AAS_VIEWER

AAS Manager

Additionally, with this role, users have Write permissions for Asset Administration Shells.

AAS_MANAGER

Submodel Access Reader

With this role, users have Read permission for the AAS submodel-descriptor access endpoint. Only required for Eclipse Dataspace Connector (EDC) clients.

SUBMODEL_ACCESS_READER

AAS EDC BPN Viewer

With this role, users have access-controlled Read permission for AAS resources in combination with EDC-BPN Header. Resource visibility depends on defined access rules. Only required for Eclipse Dataspace Connector (EDC) clients.

AAS_EDC_BPN_VIEWER

Async Digital Twin Registry:

Name

Description

Role key

Message Operator

With this role, users have Read permission for message client credentials.

MESSAGE_OPERATOR

Aspect Model Catalog UI

The Aspect Model Catalog hosts the models which can be the base for the aspects of your digital twins. You will be able to manage the Aspect Models registered for your tenant.

If you are already logged in for the Digital Twin Registry, simply click the Aspect Model Catalog in the left navigation bar.

Alternative:

Log in with SingleKey ID at https://workspace.bosch-semantic-stack.com/?tenant=<your-tenant-id>
The UI shows the current registered Aspect Models and Namespaces.

Right now there is not much to see, but you will learn how to add complete Namespaces of Aspect Models at Aspect Model Catalog.

Name Description Role key

Name	Description	Role key
Model Viewer	Required to see the application and its contents in your tenant’s workspace. With only that role, users can browse the Aspect Model Catalog.	`VIEWER`
Model Editor	Additionally, with this role, users have Write permission for Aspect Models.	`EDITOR`
Model Manager	Additionally, with this role, users can release Aspect Models and namespaces.	`MODEL_MANAGER`

Model Viewer

Required to see the application and its contents in your tenant’s workspace.
With only that role, users can browse the Aspect Model Catalog.

VIEWER

Model Editor

Additionally, with this role, users have Write permission for Aspect Models.

EDITOR

Model Manager

Additionally, with this role, users can release Aspect Models and namespaces.

MODEL_MANAGER

The footer can be customized, and the UI might throw an error even in case you are not interested in this option. For now, you can ignore the error message.
For a productive scenario please update the footer - see Customize footer settings.

Name	Description	Role key
Shared Settings Manager	With this role, users have write permissions for shared tenant settings, such as footers. The corresponding module in the Access Management portal is Digital Twin System Shared Settings.

Name

Description

Role key

Shared Settings Manager

With this role, users have write permissions for shared tenant settings, such as footers. The corresponding module in the Access Management portal is Digital Twin System Shared Settings.

Aspect Model Catalog - Usage

Working through the getting started guide you might not really get in touch with the Aspect Model Catalog.
However, in case you start creating own Aspect Model Catalog and want to add them to the Aspect Model Catalog, here some tips:

The namespace in which you create the Aspect Model needs to be whitelisted for your tenant.
For your "free access" environment, the default namespace would be something like
com.bosch-semantic-stack.sandbox123. To see the exact number assigned to your tenant, navigate the UI as explained at Aspect Model Catalog > Namespaces.
The Aspect Model Editor is open source software and can be downloaded at
https://github.com/eclipse-esmf/esmf-aspect-model-editor/releases.

Multitenant Access Control portal

The Multitenant Access Control portal hosts information about the users and technical clients as well as the roles granted to them.

You will be able to add and delete users and technical clients for your tenant. By assigning them to the existing roles you can decide who will be able to read or edit digital twins and Aspect Models for your tenant.

Log in with SingleKey ID at https://portal.bosch-nexeed.com/user-management/users?tenant=<your-tenant-id>
The UI shows an empty dashboard.
Navigate to Access Management > Users and click for example on your user to see details.

You will learn how to continue at Add a module to your tenant.

Name	Description	Role key
Web Portal User	With only this role, users can view the Nexeed Web Portal interface.
Web Portal Admin	Additionally, with this role, users have permissions to configure the Nexeed Web Portal for their tenant, such as adjusting the footer or privacy settings.
User Reader	With this role, users have read-only permissions for users, groups, and modules.
Module Manager	With this role, users have write permissions to manage modules, including their registration and removal.
Access Manager	With this role, users have write permissions to manage users, roles, and groups, along with their respective privileges.

Name

Description

Role key

Web Portal User

With only this role, users can view the Nexeed Web Portal interface.

Web Portal Admin

Additionally, with this role, users have permissions to configure the Nexeed Web Portal for their tenant, such as adjusting the footer or privacy settings.

User Reader

With this role, users have read-only permissions for users, groups, and modules.

Module Manager

With this role, users have write permissions to manage modules, including their registration and removal.

Access Manager

With this role, users have write permissions to manage users, roles, and groups, along with their respective privileges.