This guide explains how to upgrade a tenant IAM in Airlock as a Service. A tenant IAM has two version components:
IAM application version — i.e., the Airlock IAM version used by the tenant
Database schema version — i.e., the version of the underlying database structure used by Airlock IAM
Upgrading a tenant IAM may involve an IAM upgrade, a database schema upgrade, or both, depending on your setup and the features you want to use. When you activate an updated IAM configuration, Airlock as a Service automatically deploys an IAM instance that matches the version of that configuration. Some features additionally require a separate database schema upgrade, which is handled by Airlock Support.
Notice
Consult the ALSAASPM-N-194
Airlock IAM upgrade
The upgrade procedure depends on how the IAM configuration is managed.
Determing the current IAM version
The current IAM version is shown at the bottom of the navigation bar in the tenant IAM Adminapp.
If you use Getting started
When you apply your next configuration change, click Activate. Airlock as a Service then automatically migrates the configuration to the latest supported IAM version and deploys the upgraded tenant IAM.
If the configuration is managed by a partner
If your IAM configuration is managed by a partner, the partner prepares and applies the upgrade on your behalf. This typically includes the following steps:
Open the configuration in the Config Editor of the target Airlock IAM version.
Apply the required configuration adjustments and fixes.
Apply the required Airlock-as-a-Service-specific configuration variables and settings.
Create a ZIP file that contains the updated configuration.
Upload the ZIP file to a non-production service-level tenant in Airlock as a Service.
Activate the configuration and test all relevant flows thoroughly in the deployed tenant IAM.
Follow the staging process to roll out the changes to production.
Upgrading the tenant IAM
Update your IAM configuration to a supported Airlock IAM version.
Upload the updated configuration to the Airlock Console.
Activate the updated configuration.
The system automatically deploys a new IAM Instance that reflects the version of the IAM configuration, with no downtime during the upgrade process, and applies the configuration change immediately.
Database schema upgrades
After upgrading Airlock IAM, some features may require changes to the underlying database structure. These changes are called database schema upgrades.
When is a database schema upgrade necessary?
A database schema upgrade may be required to enable new features that require additional database columns.
Notice
The database schema version can currently be determined only by Airlock Support. To find out which database schema version your IAM tenant is running, create a support ticket.
How to request a database schema upgrade
Database schema upgrades are performed by Airlock Support to ensure data integrity and a smooth transition. To request a database schema upgrade, submit a service request using a SAASCASE ticket.
Downgrade
Reverting to a previous IAM version or configuration requires assistance from Airlock Support.