Page Comparison

...

Introduction to scopes

...

• Now administrators assign scopes to Abiquo users. In previous versions, administrators assigned scopes to Abiquo roles and the global scope was the default

  • During the upgrade process to version 4.0, Abiquo assigns role scopes to users

• All enterprises must now have a default scope for creating users

• Administrators can now create optional hierarchies of scopes and share resources, such as templates and specs, with tenants at lower levels of their hierarchies

Scope concepts

Excerpt

A Scope is an access list that contains a list of resources (enterprises and/or datacenters) to allow access. You can use scopes to: Create restricted sets of resources for administrators Share resources with a group of tenants and an optional tenant hierarchy Create a tenant hierarchy for pricing, billing, and cost and usage aggregation, which is useful for resellers and large organizations You can also control access to features and resources in the platform with privileges and allowed locations.

...

Create a scope

...

...

...

Panel
borderColor	#ff9900
borderWidth	1
borderStyle	Privileges: Manage scopes, Allow user to switch enterprises, Manage role and scope allowed CIDRs To create a scope do these steps: Go to Users → Scopes Click the + add button Enter the details as described in the following table Image ModifiedImage Modified Field Description Name The name of the scope Parent scope To optionally add the scope to a hierarchy, select a Parent scope. We recommend that under a hierarchy with limited scopes you should not select unlimited scopes (Use all enterprises and/or Use all datacenters) Allowed CIDRs To optionally create a default list of network addresses from which users with this scope can access the platform, enter Allowed CIDRs. You can also set allowed CIDRs for a role. The user will inherit the role and scope CIDRs. Any allowed CIDRs set directly for the user will have priority over these inherited allowed CIDRs. External scopes Optional: Specify attributes of an external system to define the user groups that this scope should apply to. An example of external scopes could be an LDAP group for the user. Used in external authentication modes (e.g. openid, ldap). A user's external scopes must map to a single scope (local or global). See LDAP and Active Directory Integration and Abiquo OpenID Connect Integration Scope entities Field Description Enterprises Enterprises to use in the scope. To automatically include all existing and future enterprises, select the options to Use all enterprises. If this is a user's administration scope, then the user can manage resources in the list of enterprises selected. If this is a resource scope, then users can access the resources if they belong to the enterprises that are part of the scope Datacenters Select Datacenters to include in the scope. For scopes, datacenters can be private cloud datacenters and/or public cloud regions. To automatically include all existing and future datacenters, select the options to Use all datacenters. If this is a user's administration scope, then the user can manage resources in the list of datacenters selected. Resource scopes do not use the datacenters list After you create a scope, you can assign it to a user, an enterprise, or a resource. See Manage users#CreateorEditaUser See Manage resource scopes

...

Create a scope for a tenant and its users

...

1. Create the tenant enterprise. 

   1. On the General tab, for the Default scope, select Global scope

2. Create a scope for the tenant

   1. On the General info tab, select a parent scope, for example, the Global scope or a reseller scope
      

      Image RemovedImage Added

   2. Go to the Entities tab. In the Enterprises list, select the tenant enterprise

   3. In the Datacenters list, select the appropriate locations (datacenters and public cloud regions) where the users will work
      

      Image RemovedImage Added

3. Edit the tenant enterprise and on the General tab for the Default scope select the tenant's scope
   

   Image RemovedImage Added

When an administrator creates users in the tenant, the platform will automatically suggest the tenant's enterprise scope for these users.

...

1. Create a scope for the administrator

   1. On the General info tab, optionally select a parent scope, for example, the Global scope or a reseller scope

      Image RemovedImage Added

   2. Go to the Entities tab. In the Enterprises list, select the enterprises to administer

   3. In the Datacenters list, select the appropriate locations (datacenters and public cloud regions) to administer
      

...

• You can share resources with your own scope and child scopes of your scope

• Each tenant can belong to more than one scope

• Each scope can have one parent scope only

• The platform will only consider the enterprises in the resource scopes, not the locations

...

Assign scopes to create a reseller hierarchy

You can use a reseller hierarchy for billing, pricing, and to manage and aggregate your cloud costs and usage. To create a reseller hierarchy, assign scopes to reseller, key node, and reseller customer tenants. 

...