How to create users on hyperledger and how to assign policies to the created users

Question

i have a fabric-CA server and i have 2 channels.. i want to create users and assign some policies to them to access particular channels.. how can i do it?

Answer 1

First the users need to establish identity by getting certificate signed by CA.. Mainly, two authorization checks are made..

1. The invoker’s identity must have the “hf.Registrar.Roles” attribute with a comma-separated list of values where one of the value equals the type of identity being registered.
2. The affiliation of the invoker’s identity must be equal to or a prefix of the affiliation of the identity being registered.

Channel configuration block contains MSP (membership service provider) information of each organization. Any organization that is using Fabric CA server as certificate authority can register users. Every registered user will get them certificates. After this, through channel writer authority, users can be assigned policies..