JFrog Access Create User With Group

arazzo: 1.0.1
info:
  title: JFrog Access Create User With Group
  summary: Create a group then a user in that group via the Access service.
  description: >-
    Identity provisioning through the JFrog Access v2 API. The workflow creates
    a group, creates a user that belongs to it, then reads the user back to
    confirm the membership. Every step spells out its request inline so the flow
    can be read and executed without opening the underlying OpenAPI description.
  version: 1.0.0
  x-realizes-capability-ids:
  - BC-620.20
  x-capability-derivation:
    method: 'deterministic join: sourceDescriptions -> per-tag OpenAPI -> tag/capability edge. No classification at this step.'
    min_confidence: 0.7
    sources:
    - capability_id: BC-620.20
      capability_name: Identity & Access Management
      spec: jfrog-users-api-openapi.yml
      confidence: 0.85
    model: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0
sourceDescriptions:
- name: groupsApi
  url: ../openapi/jfrog-groups-api-openapi.yml
  type: openapi
- name: securityApi
  url: ../openapi/jfrog-security-api-openapi.yml
  type: openapi
- name: usersApi
  url: ../openapi/jfrog-users-api-openapi.yml
  type: openapi
workflows:
- workflowId: create-user-with-group
  summary: Create a group and a user in it, then verify the user.
  description: >-
    Creates a group, creates a user with that group in its groups list, then
    fetches the user to confirm membership.
  inputs:
    type: object
    required:
    - groupName
    - username
    - email
    - password
    properties:
      groupName:
        type: string
        description: The group name to create.
      username:
        type: string
        description: The username to create.
      email:
        type: string
        description: The user's email address.
      password:
        type: string
        description: The initial password for the user.
  steps:
  - stepId: createGroup
    description: >-
      Create a group in the Access service for the new user.
    operationId: postAccessApiV2Groups
    requestBody:
      contentType: application/json
      payload:
        name: $inputs.groupName
        description: Created by the create-user-with-group workflow
        auto_join: false
        admin_privileges: false
    successCriteria:
    - condition: $statusCode == 201
    outputs:
      groupName: $inputs.groupName
  - stepId: createUser
    description: >-
      Create a user assigned to the newly created group.
    operationId: postAccessApiV2Users
    requestBody:
      contentType: application/json
      payload:
        username: $inputs.username
        email: $inputs.email
        password: $inputs.password
        admin: false
        profile_updatable: true
        groups:
        - $steps.createGroup.outputs.groupName
    successCriteria:
    - condition: $statusCode == 201
    outputs:
      username: $response.body#/username
  - stepId: confirmUser
    description: >-
      Read the user back to confirm it exists and belongs to the group.
    operationId: getAccessApiV2UsersByUsername
    parameters:
    - name: username
      in: path
      value: $steps.createUser.outputs.username
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      username: $response.body#/username
      groups: $response.body#/groups
  outputs:
    username: $steps.confirmUser.outputs.username
    groups: $steps.confirmUser.outputs.groups