To onboard a new MuleSoft account into Data Theorem's API security product you must first invite the cloud@datatheorem.com account to your environment and setup the proper access rights for the account.

This account will allow our services to discover and analyze (with limited read access) your configuration, resources, and APIs.

Setting up a Custom Role

To setup a custom role, open a new tab and:

1. Login into your MuleSoft Account through the AnypointPlatform portal

2. Under the title Management Center select Access Management

Note: If you can’t find Access Management then you might not have access to set this up.

1. Select Roles from the left side menu

2. Click the Add role button

3. In the dialog box for the Role Name field enter

• MuleSoftScanner

1. In the dialog box for the Role Description field enter

• Data Theorem custom role to scan and inspect environments

1. Once the role has been created, Select the API Manager tab under Permissions

2. Select the environment from the Add environment by name field for the environment you want the scanner to scan

Note: You’ll have to do steps 8-10 for each environment you want the scanner to scan.

1. Once an environment has been selected, Select the following permissions from the Select access field

• View APIs Configuration

• View Contracts

• View Policies

1. After permissions have been selected, Click the Blue Plus Icon on the right hand side

Note: This page should now look something like the following screenshot.

1. Next we move on to the Design Center where we have to setup a few more permissions, Select the Design Center tab under Permissions

2. Select the environment from the Add environment by name field for the environment you want the scanner to scan

Note: You’ll have to do steps 12-13 for each environment you want the scanner to scan.

1. Once an environment has been selected, Select the following permissions from the Select access field

• Design Center Developer

1. After permissions have been selected, Click the Blue Plus Icon on the right hand side

Note: This page should now look something like the following screenshot

1. At this point all permissions have been properly setup!

Proceed to inviting the MuleSoft scanner account below.

Inviting the MuleSoft Scanner Account

After creating the custom role we need to invite the MuleSoft scanner so Data Theorem can access your environment. Once done you should have the following:

• Organization ID

To invite the MuleSoft Scanner account, open a new tab and:

1. Login into your MuleSoft Account through the AnypointPlatform portal

2. Under the title Management Center select Access Management

Note: If you can’t find Access Management then you might not have access to set this up.

1. Select Users from the left side menu

2. Click the Invite user button

Note: If this button isn’t available you have to enable non-SSO users.
See Enable non-SSO Users Documentation.

1. In the dialog box for the Email addresses field enter

• cloud@datatheorem.com

1. For the Role field enter the custom role setup earlier

• MuleSoftScanner

1. Click Send invitation

2. Once invited we only need your Organization ID this can be found by navigating to the AnypointPlatform portal

3. Once on the portal you will be redirected to a url that looks like the following

https://anypoint.mulesoft.com/home/organizations/46753f13-52b8-4454-86e0-f92f8a6ae6a8/

1. Copy out the portion after https://anypoint.mulesoft.com/home/organizations/ this is your Organization ID

Extra References

• How to know my Organization ID

• How to add an Anypoint Platform User after enabling External Identity

• Access Management

• Access Management Roles

• Access Management Permissions Explained