Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

Create a reseller administrator role


...


A reseller admin role can have a range of privileges depending on how you will manage resellers and cloud users on the platform. So how the reseller will "manage its customers" will vary, depending on the privileges.

Before you create a reseller admin, we recommend that you first extend the standard ENTERPRISE_ADMIN role to create a basic tenant admin role to cover all features for your platform. For example, if your tenant admins should be able to manage hard disks, add this privilege, and so on.

Base reseller privileges

The base privileges for standard reseller admins are these Home view privileges:

...

The reseller admin stays in the enterprise they have switched to until they switch to another. The enterprise does not change when the user logs out and logs in again. 

Basic reseller privileges

If you wish to maintain a separate administrator account for each tenant, the administrator can log in with a separate user to each tenant that they will administer. In this case, you do not need to add the List enterprises within scope or the Allow user to switch enterprise privilege. We only recommend this option for resellers with a small number of tenants! 

Users view privileges

The users view privileges determine how the administrator can manage their customers and cloud users.

...

For example, if you manage all cloud user accounts with a centralized system, you may wish to remove the Manage users privilege from the reseller administrator.

User management

If your reseller will be managing users, in addition to the Manage users privilege that is part of the standard tenant admin role, you can assign additional privileges.

...

Note that each enterprise must have a default scope, which the platform will assign to all new users in the enterprise. Note that administrators can change the scope. However, administrators who can manage scopes can also assign the enterprise scope to users, even if it is higher than or completely different to their own scope! However, if you are using data aggregation for resellers or key nodes, you must use the enterprise default scope to define the top level scope for the reseller or key node, so it would not be convenient to change it for administrator security.

Shared resource management

If your reseller needs to be able to share resources (VM templates and VApp spec blueprints) to give access to their customers, then your reseller will be able to share templates and specs by assigning (or unassigning) their own scope and the scopes beneath their scope in the hierarchy to templates and specs.

Note that it is possible for enterprises to belong to more than one scope and this means that you can create a scope just to group tenants who will all use the same resources.

Resellers creating tenants and the scope hierarchy

If your reseller is able to create their own tenants, Abiquo will automatically add these to the reseller's scope. 

If the reseller's tenants are part of a scope hierarchy and your reseller does not need to manage their users or enterprises, then you can remove them from your reseller's scope. If you wish to allow your reseller to manage their own scope hierarchy, assign the Manage scopes privilege. This means that the reseller can add their tenants to a scope hierarchy beneath their own scope.

Reseller Pricing

With the platform's pricing system, you can assign prices to your reseller customers using a pricing model, which has a list of resource prices. Generally, you would enable resellers to view their own pricing model and to create new pricing models for their own customers, based on the prices that you will charge them including a markup.

...

For details of how to onboard hardware profile prices into pricing models at all levels of the hierarchy, see Synchronize public cloud price lists.

Reseller dashboards

The platform can obtain billing data from public cloud providers and display it on billing dashboards. When you add compute credentials for your reseller customers you can also configure and enable the billing dashboards for them. These dashboards display the latest bills and estimated bills for Amazon, Azure, and Google Cloud. 

...