...
| Excerpt |
|---|
| Note |
|---|
| title | Changes to scopes from Abiquo 4.0 |
|---|
| - Now administrators assign scopes to Abiquo users. In previous versions, administrators assigned scopes to Abiquo roles and the global scope was the default
- During the upgrade process to version 4.0, Abiquo assigns role scopes to users
- All enterprises must now have a default scope for creating users
- Administrators can now create optional hierarchies of scopes and share resources, such as templates and specs, with tenants at lower levels of their hierarchies
|
|
Scope concepts
...
| Concept | Description |
|---|
| Scope | A list of resources (enterprises and/or datacenters) for access control |
...
...
| User scope | The list of resources (datacenters and enterprises) that |
...
the user can view and manage. |
...
- Works together with the user's privileges and allowed datacenters
|
...
...
...
- allowed datacenters, even if
|
...
...
- their scope
- Administrator can manage users of the enterprises that are in their scope
|
| Resource scope | The list of enterprises whose users can access the resource, assuming they have the other required permissions |
...
- Administrator selects scopes to share the
|
...
...
...
...
- Used for VM templates and VApp specs
- Administrator can select
|
...
...
- scopes underneath their scope
|
...
|
| Scope hierarchy | For sharing resources to tenants that are |
...
underneath the administrator's |
...
...
...
- cannot manage enterprises that are not in their scope but they can share VM templates and VApp specs with
|
...
The following screenshot shows a scope with enterprises and a child scope
Image Removed
...
|
| Global scope | The default scope for the cloud administrator that |
...
...
...
...
|
| Unlimited scopes | - The following scopes are called unlimited scopes
|
...
- The global scope
- Any scope with the Use all enterprises checkbox selected, which will include ALL current and future enterprises
- Any scope with the Use all datacenters checkbox selected, which will include ALL current and future datacenters
- An unlimited
|
...
- scope cannot have a parent scope. It must be at the top of
|
...
...
- An unlimited scope has new resources added automatically in its unlimited dimensions, so you will not need to modify it to include new elements.
|
...
-
- Only a user with an unlimited scope can create an unlimited scope in the same dimensions as their scope.
|
The following screenshot shows a scope with enterprises and a child scope
Image Added
Scope use cases
...