Page Comparison

...

The platform has two main ways of controlling access: through roles with privileges and through scopes (for administration and resources). This document assumes you have a basic understanding of Abiquo roles and scopes. See Manage Roles and  and Manage Scopes.

Generally, we recommend that you will create a tenant admin role for your specific environment based on the default ENTERPRISE_ADMIN role, and then add scope and additional privileges for resellersreseller administrators.

Reseller administrator scope and flag

A reseller admin will have an administration scope that includes the Abiquo enterprises (tenants) that they will manage, which are their customers.

...

So, for example, you could have a reseller called "CloudvilleOnseller", which is an Abiquo tenant.

The reseller can then manage its customers (also Abiquo tenants) called "Customer1Customer", "Customer2" and "Customer3".

1. Create a scope for your reseller, and select the list of tenants that the reseller will administer and the datacenters that they can work with.
2. Edit the reseller enterprise and do the following:
   1. Assign the scope as the default
   2. Select the Reseller flag

Image Added

The platform will mark the Reseller with (R) in the Enterprise list.

Image Added

Reseller administrator role and privileges

A reseller admin role can have a range of privileges depending on how you will manage resellers and cloud users on the platform. So how the definition of reseller will "manage its customers" will vary, depending on the privileges.

But before Before you create a reseller admin, we recommend that you first extend the standard ENTERPRISE_ADMIN role to create a basic tenant admin role for your platform. For example, if your tenant admins should be able to manage hard disks, add this privilege, and so on.

Base reseller privileges

The base privileges for reseller admins are these Home view privileges:

...

It is not necessary for your reseller administrators to have these privileges. 

For example, if you manage all cloud user accounts with a centralized system, you may wish to remove the Manage users privilege from the reseller administrator.

User management

If your reseller will be managing users, in addition to the Manage users privilege that is part of the standard tenant admin role, you can assign additional privileges.

To allow the reseller to manage enterprises and users in a single pane of glass, rather than by switching enterprises, assign the privileges to Manage to Manage enterprises and and Manage users of all enterprises. 

Note that although the privilege is called "Manage users of all enteprisesenterprises", the administrator can only manage the enterprises listed in their scope.

...

If your reseller needs to be able to share resources (VM templates and VApp spec blueprints) to give access to their customers, then you can create a scope hierarchy with the reseller's customers and their departments or customers in scopes underneath the customer's scope. Your reseller your reseller will be able to share templates and specs by assigning (or unassigning) their own scope and the scopes beneath their scope in the hierarchy to templates and specs.

Note that it is possible for enterprises to belong to more than one scope and this means that you can create a scope just to group tenants who will all use the same resourceresources.

Resellers creating tenants and the scope hierarchy

If your reseller is able to create their own tenants, Abiquo will automatically add these to the reseller's scope. The reseller can add them to a scope hierarchy beneath their own scope. 

If the reseller's tenants are part of a scope hierarchy and your reseller does not need to manage their users or enterprises, then you can remove them from your reseller's scope. If  If you wish to allow your reseller to manage their own scope hierarchy, assign the Manage the Manage scopes privilege.  This means that the reseller can add their tenants to a scope hierarchy beneath their own scope

Note that each enterprise must have a default scope and you should check that this scope is appropriate (for the enterprise and users) and use the lowest possible scope for the enterprise, because administrators can assign the enterprise scope to users, even if it is higher than or completely different to their own scope!

The following diagram shows an example of a scope hierarchy. In Abiquo v4.0+, it is possible for that the user does not have their own enterprise in scope and they will still be able to access the enterprise's Apps library but they won't be able to edit the enterprise's public cloud credentials or users.

Image Removed

Reseller Pricing

With the Abiquo platform's pricing system, you can assign prices to your reseller customers using a pricing model, which has a list of resource prices. Generally, you would enable resellers to view their own pricing model and to create new pricing models for their own customers, based on the prices that you will charge them.

For a full guide to Pricing for the Reseller, see Reseller Pricing in the pricing documentation.

Create an organization hierarchy

For more information, see Create an organization hierarchy in hybrid cloud.