...
- Own scope
- The enterprise’s default scope (even if it is higher than their own scope)
- A lower scope in their scope hierarchy
What happens when I create an enterprise?
...
When you create an enterprise, Abiquo automatically adds the new enterprise to your scope so you can manage it, for example, to add it to other scopes. And a higher-level administrator can later remove it from your scope.
Scope hierarchies
...
An administrator with scope privileges and the “Allow user to switch enterprises” privilege can create a hierarchy by assigning a parent scope to any scope except an unlimited scope. An unlimited scope is the Global scope or a Use all enterprises or Use all datacenters scope.
The following diagram shows an example of a scope hierarchy.
The following screenshot shows For an administrator that can manage two national resellers called 4x and 5x.
These resellers have customers, with their own departments, and the administrator does not manage their users but the administrator does share templates with them.
Does an administrator need to have their own enterprise in scope?
An administrator can belong to an enterprise that is not included in their own scope, which means that they cannot manage some elements of this enterprise, eg. they cannot create users. But an administrator will usually have access to the Apps library, which is determined by their Apps library privileges, allowed datacenters, and datacenter scope. And the administrator will be able to administer templates and specs when their enterprise is the owner of the resource. To share resources and manage shared resources, such as VM templates and VApp specs, with enterprises in their child scopes, an administrator will need access to the owner enterprise and the “Allow user to switch enterprises” privilege.
Related pages: