| Table of Contents |
|---|
...
...
- A list of resources (enterprises and/or datacenters) for access control
...
- The list of resources (datacenters and enterprises) that the user can view and manage.
- The user must also have the other required permissions (privileges and allowed datacenters)
...
A user can deploy in allowed datacenters, even if they are not in their scope. An Administrator can manage users of the enterprises that are in their scope
...
A resource scope is a list of enterprises whose users can access
...
a resource, if they have the other required permissions
...
. Administrators select a set of scopes to share a resource with users of the enterprises listed in the scopes
...
Used to share VM templates and VApp specs. An administrator can select their own scope, and scopes underneath their scope in the scope hierarchy
...
Administrators can share VM templates and VApp specs with users in scopes beneath their own scope. But they cannot manage the enterprises that are not directly in their user scope
...
- The default scope for the cloud administrator that always includes all resources and cannot be modified
...
- The global scope
- Use all enterprises checkbox selected - ALL current and future enterprises
- Use all datacenters checkbox selected - ALL current and future datacenters
...
An unlimited scope cannot have a parent scope. It must be at the top of a scope hierarchy. An unlimited scope has new resources added automatically in its unlimited dimensions. Only a user with an unlimited scope can create an unlimited scope in the same dimensions as their scope.
...
- When a user creates a pricing model, the platform assigns the user's scope for tenants.
- Only users with the same tenant scope can manage the pricing models
- All users with pricing privileges can view the pricing model of their tenant
...
- You cannot change the pricing scope or display it in the UI
Scopes for VM templates and VApp specs
...
| Excerpt | |||||
|---|---|---|---|---|---|
|
To share a template:
- Edit Access the template in the owner enterprise
- Go to Apps library →
- Add one or more available scopes
- The global scope means that users from all current and future enterprises can access this template.
...
If the customers create their own scope hierarchy for their departments, then customers can share resources with the departments by scope.
Resource scope summary
Q: Which administrators can edit templates or specs?
A: Administrators in the owner enterprise (creator) with permissions to administer other enterprises
Q: How can admins share resources to users of other enterprises?
- Assign scopes
- Abiquo reads the list of enterprises in the scopes and allows users from these enterprises to use the resources
- Administrators can share templates with scopes in their own scope and scopes below their scope in the scope hierarchy tree
...