...
Resellers are platform customers (enterprise tenants) that can have their own customers on the platform. This document describes how to create a reseller administrator, and the different levels of access that you can grant this user. This document is a basic guide only, and customers should always consult the Abiquo Customer Service team for specific guidance and to resolve any doubts.
Abiquo has two main ways of controlling access: through roles with privileges and through scopes (for administration and resources). This document assumes you have a basic understanding of Abiquo roles and scopes.
Generally, you can create a tenant admin role for your specific environment based on the default ENTERPRISE_ADMIN role, and then add scope and additional privileges for resellers.
...
A reseller admin role can have a range of privileges depending on how you will manage resellers and cloud users on the platform. So the definition of "manage customers" will vary, depending on the privileges.
But before you create a reseller admin, we recommend that you could first extend the standard ENTERPRISE_ADMIN role to create a basic tenant admin role for your platform. For example, if your tenant admins should be able to manage hard disks, add this privilege, and so on.
Base privileges
The most important base privileges for reseller admins are probably these Home view privileges:
...
If your reseller needs to be able to share resources (VM templates and VApp spec blueprints) to give access to their customers, then you can create a scope hierarchy with the reseller's customers and their departments or customers in scopes underneath the customer's scope. Your reseller will be able to assign and unassign share templates and specs by assigning (or unassigning) their own scope and the scopes beneath their scope in the hierarchy to templates and specs.
...
Note that it is possible for enterprises to belong to more than one scope and this means that you can create a scope to group tenants who will all use the same resource.
Resellers creating tenants and the scope hierarchy
If your reseller is able to create their own tenants, Abiquo will automatically add these to the reseller's scope. If they are later The reseller can add them to a scope hierarchy beneath their own scope.
If the reseller's tenants are part of a scope hierarchy and your reseller does not need to manage their users or enterprises, then you can remove them from your reseller's scope. If you wish to allow your reseller to manage their own scope hierarchy, assign the Manage scopes privilege.
Note that each tenant enterprise must have a default scope and you should check that this scope is appropriate (for the enterprise and users) and use the lowest possible scope for the enterprise, because administrators can assign the enterprise scope to users, even if it is higher than or completely different to their own scope. If you wish to allow your reseller to manage the scope hierarchy, assign the Manage scopes privilege. !
The following diagram shows an example of a scope hierarchy. In Abiquo v4.0+, it is possible for that the user does not have their own enterprise in scope and they will still be able to access the enterprise's Apps library but they won't be able to edit the enterprise's public cloud credentials or users.
Reseller Pricing
...