Create an eligible actor without an Authentication Account - RodrigoMattosoSilveira/EnterpriseRemoteSystems GitHub Wiki

  1. Log in as the Application Administrator.
  2. Open: /admin/authorization
  3. In Create Actor, select an existing Person/Collaborator that is not already represented by an authorization actor.
  4. Create the actor and make sure the actor is Active.
  5. Grant that actor an active role. For this test I recommend: EXPENSE_OPERATOR
  6. Grant it for tenant: default
  7. Confirm the actor now appears in Authorization with:
Active actor
EXPENSE_OPERATOR
default
Active grant
  1. Stop there. Do not create an Authentication Account yet.

At that point you have exactly what Section 10 requires:

Person
  ↓
Authorization Actor — ACTIVE
  ↓
Role Grant — EXPENSE_OPERATOR @ default
  ↓
Authentication Account — NONE

Then continue Section 10

Navigate to: /admin/authentication

The actor you just created should now appear in the Authorization Actor selector for creating an Authentication Account.

That is important because, after our recent corrections, the Authentication page only offers actors that:

are active;
do not already have an Authentication Account;
have at least one active role grant;
have effective access to an active tenant.

So merely creating an actor is not enough anymore—you must also give it the active EXPENSE_OPERATOR @ default grant before it becomes eligible.

If you want a recognizable test name, create/select a Person whose nickname makes the actor easy to identify, for example AuthAccountTest.