| Table of Contents |
|---|
...
| Table of Contents |
|---|
| Excerpt | ||
|---|---|---|
| ||
Every cloud user has a role to define how they can work with resources. Each user role has a set of privileges to allow access to different cloud features. There are four default user roles in the system: Cloud administrator, Enterprise administrator, User, and Enterprise viewer. See Default roles. You can clone these roles and modify them to create your own roles |
. The Privileges page lists all the privileges and shows the default roles that they belong to. The default roles are global roles so they are available to all enterprises but it is also possible to create a role that belongs to a single enterprise. Privileges are generally independent. For example, if your user role does not have the "Access Infrastructure view" privilege, the UI will not display the Infrastructure icon. But if your role has the "Manage datacenters" and "View datacenter details" privileges, you can use the API to access the datacenter infrastructure that you cannot access in the UI. You can specify directory groups for user roles. When users log in, the platform will automatically create users and assign the matching roles to them. You can use LDAP, Active Directory, OpenID Connect, and SAML. In addition to user roles, every user also has an administration scope to define the resources that a user can view, access, and administer |
. And |
each user's enterprise has a list of allowed datacenters and public cloud regions that users can work in |
. For |
details of the Abiquo concepts of enterprises and users, see Tenants and users in the Abiquo Walkthrough. For information about creating a reseller, see Create a reseller administrator user. For information about creating a tenant administrator, see Create a tenant administrator user. |
| Tip |
|---|
API Documentation For the Abiquo API documentation of this feature, see Abiquo API Resources and the page for this resource RolesResource. |
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
Privileges: Access Roles and Scope screens |
To manage display roles, go to Users → Roles → Roles. By default, you will see the Global roles that are available to for all enterprises and the platform will display them with (and they have "(Global)" after the name). To display the enterprise roles that belong to for a specific enterprise, select the enterprise.
...
Create or modify a role
| Excerpt | ||||||
|---|---|---|---|---|---|---|
| ||||||
Abiquo provides a set of default roles and you can clone and modify them to create new roles. See Default roles. See Privileges for a list of the privileges for each role. | ||||||
| Panel | ||||||
| ||||||
Privileges: Access Roles and Scope screens, Manage roles, Manage global role A user can only have one role, but a role can be associated with multiple OpenID, AD, or LDAP groups. |
...
By default the new role will have "Copy:" added to its name, for example, "Copy: CLOUD_ADMIN". To create or modify a role:
|
...
|
...
|
...
Field
...
Description
...
Role name
...
|
...
Enterprise
...
The enterprise that a local role belongs to
...
|
...
|
...
Allowed CIDRs
...
|
...
|
...
|
...
|
...
External Roles
|
...
After you create or clone a role, select the role name in the list and edit the privileges as required, then click Save. |
Modify the privileges of a role
...
Go to Users → Roles
For a local role, select the enterprise that the role belongs to
Select the role from the Roles list
In the Privileges pane, select or deselect the privileges
To add or remove groups of privileges, click the All privileges checkbox beside the group name
You cannot undo but you can discard the changes
Save the changes by clicking Save
The platform will discard your changes if you do an action outside of the Privileges pane, for example, clicking on a another role name
| Note |
|---|
Troubleshooting and tips Roles
Privileges
|
...