{"id":6327,"date":"2019-04-18T13:21:19","date_gmt":"2019-04-18T07:51:19","guid":{"rendered":"\/?p=6327"},"modified":"2021-06-15T12:14:29","modified_gmt":"2021-06-15T06:44:29","slug":"ensure-service-user-an-acs-aem-commons-utility","status":"publish","type":"post","link":"https:\/\/www.argildx.us\/technology\/ensure-service-user-an-acs-aem-commons-utility\/","title":{"rendered":"Ensure Service User \u2013 An ACS AEM Commons Utility"},"content":{"rendered":"\n<p><span class=\"TextRun SCXW9003496 BCX0\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW9003496 BCX0\">Prior to AEM 6.2, developers used administrative resource resolver to access JCR programmatically.<\/span><\/span><span class=\"EOP SCXW9003496 BCX0\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> Now, Ensure Service User in AEM will make the process less error prone and easier to manage.<\/span><\/p>\n<h5><b><span data-contrast=\"auto\">Problem&nbsp;<\/span><\/b><b><span data-contrast=\"auto\">S<\/span><\/b><b><span data-contrast=\"auto\">tatement:<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/h5>\n<p><span data-contrast=\"auto\">Let us assume that a developer needs to access the resource from content path programmatically. Before AEM 6.2, administrative resource resolver was one of the ways to achieve the same.&nbsp;<\/span><span data-contrast=\"auto\">In<\/span><span data-contrast=\"auto\">&nbsp;<\/span><span data-contrast=\"auto\">addition to<\/span><span data-contrast=\"auto\">&nbsp;providing access to the content path(s)<\/span><span data-contrast=\"auto\">,<\/span><span data-contrast=\"auto\">&nbsp;administrative resource resolver provides access to the complete repository&nbsp;<\/span><span data-contrast=\"auto\">thereby<\/span><span data-contrast=\"auto\">&nbsp;<\/span><i><span data-contrast=\"auto\">mak<\/span><\/i><i><span data-contrast=\"auto\">ing<\/span><\/i><i><span data-contrast=\"auto\">&nbsp;the application prone to making undesired changes<\/span><\/i><span data-contrast=\"auto\">&nbsp;(e.g. nodes under \/libs, \/apps etc.).<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"auto\">Since AEM 6.2, administrative resource resolver&nbsp;<\/span><span data-contrast=\"auto\">has<\/span><span data-contrast=\"auto\">&nbsp;<\/span><span data-contrast=\"auto\">been&nbsp;<\/span><span data-contrast=\"auto\">deprecated by Adobe and to address the above&nbsp;<\/span><span data-contrast=\"auto\">issue&nbsp;<\/span><span data-contrast=\"auto\">Adobe introduced \u201cService User\u201d.&nbsp;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<h5><b><span data-contrast=\"auto\">Service User:<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/h5>\n<p><span data-contrast=\"auto\">A service user is a JCR user with no&nbsp;<\/span><span data-contrast=\"auto\">set&nbsp;<\/span><span data-contrast=\"auto\">password&nbsp;and&nbsp;<\/span><span data-contrast=\"auto\">limited<\/span><span data-contrast=\"auto\">&nbsp;privileges&nbsp;necessary to perform a specific task.&nbsp;<\/span><span data-contrast=\"auto\">N<\/span><span data-contrast=\"auto\">o password&nbsp;<\/span><span data-contrast=\"auto\">requirement&nbsp;<\/span><span data-contrast=\"auto\">means that it will not be possible to login with a service user.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"none\">JCR<\/span><span data-contrast=\"auto\">&nbsp;is a<\/span><span data-contrast=\"auto\">ccess<\/span><span data-contrast=\"auto\">ed<\/span><span data-contrast=\"auto\">&nbsp;<\/span><span data-contrast=\"auto\">us<\/span><span data-contrast=\"auto\">i<\/span><span data-contrast=\"auto\">ng s<\/span><span data-contrast=\"auto\">ervice users<\/span><span data-contrast=\"auto\">&nbsp;i<\/span><span data-contrast=\"auto\">nstead of&nbsp;the administrative resource resolver.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"auto\">Below are&nbsp;<\/span><span data-contrast=\"auto\">two<\/span><span data-contrast=\"auto\">&nbsp;plu<\/span><span data-contrast=\"auto\">s<\/span><span data-contrast=\"auto\">&nbsp;points about Service User.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"13\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">A service user per bundle w<\/span><span data-contrast=\"auto\">ith a<\/span><span data-contrast=\"auto\">&nbsp;<\/span><span data-contrast=\"auto\">limited&nbsp;<\/span><span data-contrast=\"auto\">set of permission<\/span><span data-contrast=\"auto\">s<\/span><span data-contrast=\"auto\">.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"13\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Does not have password so no one can login.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<\/ul>\n<h5><b><span data-contrast=\"auto\">Problems&nbsp;<\/span><\/b><b><span data-contrast=\"auto\">With<\/span><\/b><b><span data-contrast=\"auto\">&nbsp;Service User:<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/h5>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Manual activity<\/span><span data-contrast=\"auto\">&nbsp;<\/span><span data-contrast=\"auto\">on every server.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">A<\/span><span data-contrast=\"auto\">ssign permission on every server.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">Management of these permission<\/span><span data-contrast=\"auto\">s<\/span><span data-contrast=\"auto\">&nbsp;is prone<\/span><span data-contrast=\"auto\">&nbsp;to error<\/span><span data-contrast=\"auto\">.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"auto\">Again, there is lot of manual work for developer<\/span><span data-contrast=\"auto\">s<\/span><span data-contrast=\"auto\">&nbsp;to set<\/span><span data-contrast=\"auto\">&nbsp;<\/span><span data-contrast=\"auto\">up service user&nbsp;<\/span><span data-contrast=\"auto\">i<\/span><span data-contrast=\"auto\">n different environments.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"auto\">To overcome this problem<\/span><span data-contrast=\"auto\">,<\/span><span data-contrast=\"auto\">&nbsp;ACS Common provides a different way to bootstrap AEM project<\/span><span data-contrast=\"auto\">s<\/span><span data-contrast=\"auto\">&nbsp;with different functionality, a set of reusable components and AEM development kit.&nbsp;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"auto\">Here, we are going to discuss great utilities of ACS common named \u201cEnsure Service User\u201d.&nbsp;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<h5><b><span data-contrast=\"auto\">Ensure Authorizable or Ensure Service User:<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/h5>\n<p><span data-contrast=\"auto\">Ensure Service User is provided by ACS commons. Here&nbsp;<\/span><span data-contrast=\"auto\">is<\/span><span data-contrast=\"auto\">&nbsp;some points about Ensure Service User.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"15\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Create once and use&nbsp;<\/span><span data-contrast=\"auto\">everywhere<\/span><span data-contrast=\"auto\">.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"15\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Define service user and their ACL in OSGi configuration.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"15\" aria-setsize=\"-1\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">Less error prone and easy to maintain.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"15\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">You can manage the group and&nbsp;<\/span><span data-contrast=\"auto\">hierarchies for service user.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"15\" aria-setsize=\"-1\" data-aria-posinset=\"5\" data-aria-level=\"1\"><span data-contrast=\"auto\">Available since version v3.8.0.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<\/ul>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<h5><b><span data-contrast=\"auto\">How to use:<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/h5>\n<p><span data-contrast=\"auto\">Here step by step procedure are described to use \u201cEnsure Service User\u201d.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:360,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<ol>\n<li data-leveltext=\"%1.\" data-font=\"\" data-listid=\"28\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\">\n<h6><b><span data-contrast=\"auto\">Create an OSGi configuration for service user using factory configuration<\/span><\/b><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/h6>\n<\/li>\n<\/ol>\n<p aria-level=\"1\"><span data-contrast=\"none\">com.adobe.acs.commons.users.impl.EnsureServiceUser-meetupUser.xml<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559731&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:0,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<pre class=\"lang:default decode:true\">&lt;?xml version=\"1.0\"&nbsp;encoding=\"UTF-8\"?&gt;&nbsp;&lt;jcr:root&nbsp;xmlns:sling=\"http:\/\/sling.apache.org\/jcr\/sling\/1.0\"&nbsp;xmlns:cq=\"http:\/\/www.day.com\/jcr\/cq\/1.0\"&nbsp;&nbsp;&nbsp;xmlns:jcr=\"http:\/\/www.jcp.org\/jcr\/1.0\"&nbsp;xmlns:nt=\"http:\/\/www.jcp.org\/jcr\/nt\/1.0\"&nbsp;&nbsp;&nbsp;jcr:primaryType=\"sling:OsgiConfig\"&nbsp;&nbsp;&nbsp;principalName=\"meetup-service-user\"&nbsp;&nbsp;&nbsp;type=\"add\"&nbsp;&nbsp;&nbsp;ensure-immediately=\"{Boolean}true\"&nbsp;&nbsp;&nbsp;aces=\"[type=allow;privileges=jcr:read\\,rep:write;path=\/content]\"\/&gt;&nbsp;<\/pre>\n<p><span data-contrast=\"auto\">Here please note followings points:<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<h6><b><span data-contrast=\"auto\">Principal&nbsp;<\/span><\/b><b><span data-contrast=\"auto\">Name:<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/h6>\n<p><span data-contrast=\"auto\">Principal name is name of your service user.&nbsp;<\/span><span data-contrast=\"auto\">It<\/span><span data-contrast=\"auto\">&nbsp;can be just principal name or principal name with relative path or principal name with absolute path.&nbsp;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"auto\">Remember, service users may only&nbsp;<\/span><span data-contrast=\"auto\">exit<\/span><span data-contrast=\"auto\">&nbsp;<\/span><span data-contrast=\"auto\">under&nbsp;<\/span><b><span data-contrast=\"auto\">\u201c<\/span><\/b><b><span data-contrast=\"auto\">\/home\/users\/system\u201d<\/span><\/b><span data-contrast=\"auto\">&nbsp;path.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"auto\">For example:<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"auto\">&nbsp; &nbsp; &nbsp;1. Your <\/span><\/b><b><span data-contrast=\"auto\">Input<\/span><\/b><span data-contrast=\"auto\">:&nbsp;<\/span><span data-contrast=\"auto\">meetup-service-user<\/span><span data-contrast=\"auto\">&nbsp;<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Service User will be created under path:<\/span><\/b><span data-contrast=\"auto\">&nbsp;\u201c\/home\/users\/system\/meetup-service-user\u201d<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559731&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"auto\">&nbsp; &nbsp; &nbsp;2. Your Input:<\/span><\/b><span data-contrast=\"auto\">&nbsp;\/my-company\/meetup-service-user&nbsp;<\/span><b><span data-contrast=\"auto\">or&nbsp;<\/span><\/b><span data-contrast=\"auto\">my-company\/meetup-service-user&nbsp;<\/span><b><span data-contrast=\"auto\">or<\/span><\/b><b><span data-contrast=\"auto\">&nbsp;<\/span><\/b><span data-contrast=\"auto\">\/<\/span><span data-contrast=\"auto\">my-company\/meetup-service-user<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Service&nbsp;<\/span><\/b><b><span data-contrast=\"auto\">User&nbsp;<\/span><\/b><b><span data-contrast=\"auto\">will be created under path:<\/span><\/b><span data-contrast=\"auto\">&nbsp;\u201c\/home\/users\/system\/my-company\/meetup-service-user\u201d<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559731&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"auto\">&nbsp; &nbsp; &nbsp;3. Your Input:<\/span><\/b><b><span data-contrast=\"auto\">&nbsp;<\/span><\/b><span data-contrast=\"auto\">\/home\/users\/system\/my-company\/m<\/span><span data-contrast=\"auto\">eetup-service-user<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Service&nbsp;<\/span><\/b><b><span data-contrast=\"auto\">User&nbsp;<\/span><\/b><b><span data-contrast=\"auto\">will be created under path:<\/span><\/b><span data-contrast=\"auto\">&nbsp;\u201c\/home\/users\/system\/my-company\/meetup-service-user\u201d<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559731&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Note:<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559731&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"25\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"2\"><span data-contrast=\"auto\">If a system user exists with the same principal name at a DIFFERENT location, this tool assumes that service user is correct and not attempt to move it to the specified location in this configuration.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<\/ul>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"25\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"2\"><span data-contrast=\"auto\">If a principal name is specified for an AEM or ACS AEM Commons provided system user, the ensure user process will fail. This list may not always be exhaustive and up to date and meant to help protect against collisions.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<\/ul>\n<h6><b><span data-contrast=\"auto\">Type:<\/span><\/b><span data-contrast=\"auto\">&nbsp;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/h6>\n<p><span data-contrast=\"auto\">ACS AEM Commons provide the facility to add or remove Service User. Here we<\/span><span data-contrast=\"auto\">&nbsp;<\/span><span data-contrast=\"auto\">are creating the service user.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option \u201cadd\u201d:&nbsp;<\/span><\/b><span data-contrast=\"auto\">Ensure the&nbsp;<\/span><span data-contrast=\"auto\">existence<\/span><span data-contrast=\"auto\">&nbsp;of service user.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559731&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option \u201cremove\u201d:&nbsp;<\/span><\/b><span data-contrast=\"auto\">Ensure that service user&nbsp;<\/span><span data-contrast=\"auto\">is<\/span><span data-contrast=\"auto\">&nbsp;removed.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559731&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Ensure-Immediately:<\/span><\/b><b><span data-contrast=\"auto\">&nbsp;<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><span data-contrast=\"auto\">Two options are available, we can set it either true or false. By default<\/span><span data-contrast=\"auto\">,<\/span><span data-contrast=\"auto\">&nbsp;it is true.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Option \u201ctrue\u201d:<\/span><\/b><span data-contrast=\"auto\">&nbsp;<\/span><span data-contrast=\"auto\">When set to true, the&nbsp;<\/span><span data-contrast=\"auto\">i<\/span><span data-contrast=\"auto\">nsurance is performed whenever this bundle is loaded<\/span><span data-contrast=\"auto\">.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559731&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Aces:&nbsp;<\/span><\/b><span data-contrast=\"auto\">&nbsp;Array<\/span><span data-contrast=\"auto\">&nbsp;of ACE (<\/span><span data-contrast=\"none\">access control entry<\/span><span data-contrast=\"auto\">) definitions to ensure for the principal.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:360,&quot;335559731&quot;:360,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Format:<\/span><\/b><span data-contrast=\"auto\">&nbsp;<\/span><span data-contrast=\"auto\">type=<\/span><span data-contrast=\"auto\">allow;privileges<\/span><span data-contrast=\"auto\">=<\/span><span data-contrast=\"auto\">jcr:read,rep:write;path<\/span><span data-contrast=\"auto\">=\/content\/<\/span><span data-contrast=\"auto\">foo;rep:glob<\/span><span data-contrast=\"auto\">=\/<\/span><span data-contrast=\"auto\">jcr:content<\/span><span data-contrast=\"auto\">\/*<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:360,&quot;335559731&quot;:360,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"26\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"2\"><b><span data-contrast=\"auto\">type:<\/span><\/b><span data-contrast=\"auto\">&nbsp;allow OR deny, it is required property.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"26\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"2\"><b><span data-contrast=\"auto\">privileges:<\/span><\/b><span data-contrast=\"auto\">&nbsp;comma delimited list of valid JCR privileges,&nbsp;<\/span><span data-contrast=\"auto\">it is required property.<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"26\" aria-setsize=\"-1\" data-aria-posinset=\"3\" data-aria-level=\"2\"><b><span data-contrast=\"auto\">path:<\/span><\/b><span data-contrast=\"auto\">&nbsp;absolute content path which the ACE will be&nbsp;<\/span><span data-contrast=\"auto\">applied,&nbsp;<\/span><span data-contrast=\"auto\">it<\/span><span data-contrast=\"auto\">&nbsp;is required property.<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"auto\">&nbsp;<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<h6><b><span data-contrast=\"auto\">&nbsp; &nbsp; &nbsp;1. Service user mapping with OSGi Service<\/span><\/b><b><span data-contrast=\"auto\">.<\/span><\/b><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/h6>\n<p><span data-contrast=\"auto\">Map your service user with Resource resolver service.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:360,&quot;335559731&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<p aria-level=\"1\"><span data-contrast=\"auto\">org.apache.sling.serviceusermapping.impl.ServiceUserMapperImpl.amended-meetupUser.xml<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559731&quot;:720,&quot;335559738&quot;:240,&quot;335559739&quot;:0,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n<pre class=\"lang:default decode:true\">&lt;?xml version=\"1.0\" encoding=\"UTF-8\"?&gt;&lt;jcr:root&nbsp;xmlns:sling=\"http:\/\/sling.apache.org\/jcr\/sling\/1.0\"&nbsp;xmlns:jcr=\"http:\/\/www.jcp.org\/jcr\/1.0\"&nbsp;&nbsp;jcr:primaryType=\"sling:OsgiConfig\"&nbsp;&nbsp;user.mapping=\"[com.argildx.argildx-meetup:ResourceResolverUtil=meetup-service-user]\"\/&gt;&nbsp;<\/pre>\n<h6><b><span data-contrast=\"auto\">&nbsp; &nbsp; &nbsp;2. Use this service to get resource resolver instance.<\/span><\/b><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/h6>\n<pre class=\"lang:default decode:true\">public class ResourceResolverUtil { \n\n  \/** The resource resolver factory. *\/   \n\n@Reference private transient ResourceResolverFactory resourceResolverFactory; \n\n  \/** Gets the resource resolver. \n\n   * @return the resource resolver  *\/ \n\npublic ResourceResolver getResourceResolver() { \n\n    ResourceResolver resourceResolver = null; \n\n    try {      final Map&lt;String, Object&gt; authInfo = Collections.singletonMap(ResourceResolverFactory.SUBSERVICE, (Object) \"ResourceResolverUtil\");       \n\nresourceResolver = resourceResolverFactory.getServiceResourceResolver(authInfo);     \n\n} catch (LoginException le) { \n\n}     \n\nreturn resourceResolver;   \n\n}} \n\n <\/pre>\n<h5><b><span data-contrast=\"auto\">Demo:<\/span><\/b><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/h5>\n<p><span data-contrast=\"auto\">A working demo present on bitbucket can be viewed on the following&nbsp; link: <\/span><a href=\"https:\/\/bitbucket.org\/argildx\/aemdev-meetup-s1\/overview\"><span data-contrast=\"none\">https:\/\/bitbucket.org\/argildx\/aemdev-meetup-s1\/overview<\/span><\/a><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">&nbsp;<\/span><\/p>\n\n\n<figure class=\"wp-block-image\"><\/figure>\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":29,"featured_media":6627,"comment_status":"open","ping_status":"open","sticky":true,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","content-type":"","footnotes":""},"categories":[66],"tags":[25,301],"yst_prominent_words":[537,530,525,366,527,520,534,531,529,524,521,536,528,526,535,533,538,523,532,522],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v14.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Ensure Service User in AEM - An ACS Commons Utility | Argil DX<\/title>\n<meta name=\"description\" content=\"Access JCR with Ensure Service User to perform specific tasks in AEM. This create once and use everywhere feature replaces administrative resource revolver.\" \/>\n<meta name=\"robots\" content=\"index, follow\" \/>\n<meta name=\"googlebot\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta name=\"bingbot\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.argildx.us\/technology\/ensure-service-user-an-acs-aem-commons-utility\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ensure Service User in AEM - An ACS Commons Utility | Argil DX\" \/>\n<meta property=\"og:description\" content=\"Access JCR with Ensure Service User to perform specific tasks in AEM. This create once and use everywhere feature replaces administrative resource revolver.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.argildx.us\/technology\/ensure-service-user-an-acs-aem-commons-utility\/\" \/>\n<meta property=\"og:site_name\" content=\"Argil DX\" \/>\n<meta property=\"article:published_time\" content=\"2019-04-18T07:51:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-06-15T06:44:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.argildx.us\/wp-content\/uploads\/2019\/04\/Ensure-Service-User-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1440\" \/>\n\t<meta property=\"og:image:height\" content=\"541\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.argildx.us\/#website\",\"url\":\"https:\/\/www.argildx.us\/\",\"name\":\"Argil DX\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/www.argildx.us\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.argildx.us\/technology\/ensure-service-user-an-acs-aem-commons-utility\/#primaryimage\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.argildx.us\/wp-content\/uploads\/2019\/04\/Ensure-Service-User-1.jpg\",\"width\":1440,\"height\":541,\"caption\":\"Ensure Service User \\u2013 An ACS AEM Commons Utility\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.argildx.us\/technology\/ensure-service-user-an-acs-aem-commons-utility\/#webpage\",\"url\":\"https:\/\/www.argildx.us\/technology\/ensure-service-user-an-acs-aem-commons-utility\/\",\"name\":\"Ensure Service User in AEM - An ACS Commons Utility | Argil DX\",\"isPartOf\":{\"@id\":\"https:\/\/www.argildx.us\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.argildx.us\/technology\/ensure-service-user-an-acs-aem-commons-utility\/#primaryimage\"},\"datePublished\":\"2019-04-18T07:51:19+00:00\",\"dateModified\":\"2021-06-15T06:44:29+00:00\",\"author\":{\"@id\":\"https:\/\/www.argildx.us\/#\/schema\/person\/1c5b6f3f2f7218d9acb851588b98551f\"},\"description\":\"Access JCR with Ensure Service User to perform specific tasks in AEM. This create once and use everywhere feature replaces administrative resource revolver.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.argildx.us\/technology\/ensure-service-user-an-acs-aem-commons-utility\/\"]}]},{\"@type\":[\"Person\"],\"@id\":\"https:\/\/www.argildx.us\/#\/schema\/person\/1c5b6f3f2f7218d9acb851588b98551f\",\"name\":\"Argil DX Media\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.argildx.us\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/0ccbc04705942d1269cdf9f789e58484?s=96&d=mm&r=g\",\"caption\":\"Argil DX Media\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","_links":{"self":[{"href":"https:\/\/www.argildx.us\/wp-json\/wp\/v2\/posts\/6327"}],"collection":[{"href":"https:\/\/www.argildx.us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.argildx.us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.argildx.us\/wp-json\/wp\/v2\/users\/29"}],"replies":[{"embeddable":true,"href":"https:\/\/www.argildx.us\/wp-json\/wp\/v2\/comments?post=6327"}],"version-history":[{"count":0,"href":"https:\/\/www.argildx.us\/wp-json\/wp\/v2\/posts\/6327\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.argildx.us\/wp-json\/wp\/v2\/media\/6627"}],"wp:attachment":[{"href":"https:\/\/www.argildx.us\/wp-json\/wp\/v2\/media?parent=6327"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.argildx.us\/wp-json\/wp\/v2\/categories?post=6327"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.argildx.us\/wp-json\/wp\/v2\/tags?post=6327"},{"taxonomy":"yst_prominent_words","embeddable":true,"href":"https:\/\/www.argildx.us\/wp-json\/wp\/v2\/yst_prominent_words?post=6327"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}