...
| Excerpt | |||||
|---|---|---|---|---|---|
|
Scope concepts
...
Scope example
The following screenshot shows a scope with enterprises and a child scope
Scope use cases
...
A Scope is an access list that contains a list of resources (enterprises and/or datacenters) to allow access.
You can use scopes to:
- Create restricted sets of resources for administrators
- Share resources with a group of tenants and an optional tenant hierarchy
A typical use case for scopes would be on a platform with resellers.
...
Create a scope
| Include Page | ||||
|---|---|---|---|---|
|
...
Assign scopes
You can assign a scope to one or more entities to restrict access, share resources, or to create a hierarchy, as described here.
...
To restrict administrator access to resources, assign a scope to the administrator's user account:
The administrator can manage the locations (datacenters and public cloud regions) that are in their scope (e.g. add templates). An administrator can manage enterprises and users of the enterprises that are in their scope.
Note title Troubleshooting and Tips - The user must also have the other required permissions (privileges and allowed datacenters).
- A user can work in allowed datacenters (e.g. create virtual datacenters, deploy), even if the datacenters are not in their scope.
| Expand |
|---|
For example, a Managed Service Provider in Spain, with datacenters in Madrid, Barcelona, Valencia, and Seville. The scopes could be defined as follows:
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
To share resources (templates, VApp specs) to users of other enterprises, assign one or more scopes to the resource:
- The scopes contain the enterprises that can access the resource
- The user can also select child scopes to share resources to their users
The users of the enterprises listed in the scopes can access the resource, if they have the other required permissions
| Note | ||
|---|---|---|
| ||
|
...
To create a reseller hierarchy, assign the scope to an enterprise as its default scope:
- The parent scopes define the hierarchy levels
- Each scope can have one reseller and/or one key node
The resellers and key nodes are for management and aggregation of costs and usage. Administrators can share VM templates and VApp specs with users in scopes beneath their own scope.
- Scope hierarchy: The administrator for Spain could also have a scope hierarchy beneath the Spain scope that includes the scopes for Eastern Spain and Central and Southern Spain and then their customers at a lower level. The administrator for Spain can only manage the users of the Spanish national organization but they can share templates and Vapp specs with tenants in the scopes at all levels of the hierarchy.
Diagram: an example of a scope hierarchy
| Expand | ||
|---|---|---|
| ||
|
Managing Scopes
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
Privilege: Manage scopes, Allow user to switch enterprises |
To manage scopes, go to Users → Scopes.
Create or Modify a Scope
To create or modify a scope do these steps:
- Click the add or edit button
- Enter the scope name
- Optional: to add the scope to a hierarchy, select a parent scope. We recommend that under a hierarchy with limited scopes you should not select Use all enterprises or Use all datacenters
- Select enterprises and datacenters to include in the scope
- The options to Use all enterprises or Use all datacenters will automatically include new enterprises or datacenters
Screenshot: an unlimited enterprises and datacenters scope.
| Expand | ||
|---|---|---|
| ||
...
After you create or modify a scope, you can assign it to a user or a resource.
| Note | ||
|---|---|---|
| ||
|
Delete a scope
To delete a scope, select it in the list and click the delete button.
| Note | ||
|---|---|---|
| ||
|
- Reseller: A reseller enterprise in the hierarchy can use partner or reseller credentials for public cloud and manage billing and pricing for their hierarchy.
Key node: A key node enterprise can obtain aggregate billing and usage data for their hierarchy
Scope hierarchy diagram:
Expand title Click here to show/hide the
...
diagram
...
...
Manage scopes with the API
...
Related pages
- Manage cloud tenants: Manage Enterprises
- Create roles with privileges to control access to platform actions: Manage Roles
- Manage Users