| Table of Contents |
|---|
| Div | ||
|---|---|---|
| ||
...
| Excerpt | |||||
|---|---|---|---|---|---|
|
Scope concepts
...
An Abiquo scope is a list of resources (enterprises and/or datacenters) for access control.
...
A "user scope" is the list of resources (datacenters and enterprises) that
...
a user can view and manage.
...
This is also called an "administration scope". This scope works together with the user's privileges and allowed datacenters, which define how they can use resources. So this means that an administrator can deploy VMs in their enterprise's allowed datacenters, even if
...
the datacenters are not in
...
the administrator's scope.
...
A "resource scope" is a list of enterprises whose users can access the resource,
...
assuming they have the other required permissions
...
. For example, administrators select scopes for VM templates and Virtual Appliance Spec blueprints. The administrator selects scopes to share
...
the resources with the users of the enterprises
...
within the scopes
...
. They can select their own scope, and if there is a scope hierarchy, they can select the scopes underneath their scope
...
.
A "scope hierarchy" is for sharing resources to tenants that are
...
below an administrator's own scope
...
. Administrators can only manage users in tenants of their own scope. But they can share VM templates and VApp specs with
...
tenants in scopes
...
below their
...
scope.
...
The following screenshot shows a scope with enterprises and a child scope
The Global scope is the default scope for the cloud administrator that
...
contains all
...
elements and it cannot be modified
...
.
The following scopes are called unlimited scopes:
- The global scope
- Any scope with the Use all enterprises checkbox selected
...
- , which will include ALL current and future enterprises
- Any scope with the Use all datacenters checkbox selected
...
- , which will include ALL current and future datacenters
An unlimited scope
...
is always at the top of the scope hierarchy, which means it cannot have a parent scope
...
.
...
An unlimited scope has new resources added automatically
...
, so you will not need to modify it to include new elements. Only a user with an unlimited scope can create an unlimited scope in the same dimensions as their scope.
...
The following screenshot shows a scope with enterprises and a child scope
Scope use cases
...