...
| Excerpt |
|---|
| Note |
|---|
| title | Changes to scopes from Abiquo 4.0 |
|---|
| - Now administrators assign scopes to Abiquo users. In previous versions, administrators assigned scopes to Abiquo roles and the global scope was the default
- During the upgrade process to version 4.0, Abiquo assigns role scopes to users
- All enterprises must now have a default scope for creating users
- Administrators can now create optional hierarchies of scopes and share resources, such as templates and specs, with tenants at lower levels of their hierarchies
|
|
Scope concepts
| Concept_______ | Description | Notes |
|---|
| Scope | A list of resources (enterprises and/or datacenters) for access control |
|
|---|
| User scope | - The list of resources (datacenters and enterprises) that the user can view and manage.
- The user must also have the other required permissions (privileges and allowed datacenters)
| A user can deploy in allowed datacenters, even if they are not in their scope.
An Administrator can manage users of the enterprises that are in their scope |
|---|
| Resource scope | - The list of enterprises whose users can access the resource, if they have the other required permissions
- Administrators select a set of scopes to share a resource with users of the enterprises listed in the scopes
| Used to share VM templates and VApp specs.
An administrator can select their own scope, and scopes underneath their scope in the scope hierarchy |
|---|
| Scope hierarchy | - A parent scope and one or more child scopes
- Used for sharing resources to tenants that are underneath the administrator's scope
| Administrators can share VM templates and VApp specs with users in scopes beneath their own scope.
But they cannot manage the enterprises that are not directly in their user scope |
|---|
| Global scope | The default scope for the cloud administrator that always includes all resources and cannot be modified |
|
|---|
| Unlimited scopes | - The global scope
- Use all enterprises checkbox selected - ALL current and future enterprises
- Use all datacenters checkbox selected - ALL current and future datacenters
| An unlimited scope cannot have a parent scope. It must be at the top of a scope hierarchy.
An unlimited scope has new resources added automatically in its unlimited dimensions.
Only a user with an unlimited scope can create an unlimited scope in the same dimensions as their scope. |
|---|
| Pricing scope | - When a user creates a pricing model, the platform assigns the user's scope for tenants.
- Only users with the same tenant scope can manage the pricing models
- All users with pricing privileges can view the pricing model of their tenant
| You cannot change the pricing scope or display it in the UI |
|---|
...
| Panel |
|---|
| borderColor | #ff9900 |
|---|
| borderWidth | 1 |
|---|
| borderStyle | solid |
|---|
|
Privilege: Manage scopes, Allow user to switch enterprises |
From the Users view, if you have permission to Manage scopes and the Allow user to switch enterprises privilege, you can access the Scopes tab and manage scopesTo manage scopes, go to Users → Scopes.
Create or Modify a Scope
To create or modify a scope do these steps:
- Click the add
...
- or edit button
- Enter the scope name
...
- Optional: to add the scope to a hierarchy, select
...
- a parent scope. You cannot use all enterprises or use all datacenters under a hierarchy
- Select enterprises and datacenters to include in the scope
...
- The options to Use all enterprises or Use all datacenters
...
- will automatically include
...
- new enterprises or datacenters
Screenshot: an unlimited enterprises and datacenters scope.
...