| Table of Contents | ||||
|---|---|---|---|---|
|
| Info |
|---|
This page is a guide for cloud administrators to provision tenants (enterprises) in private cloud. |
Flow chart
This flow chart describes the basic process for provisioning enterprise tenants.
...
| Mermaid | ||||||
|---|---|---|---|---|---|---|
| ||||||
{"diagramDefinition":"graph TD\r\n\r\nZ(( ))\r\n\r\nstyle Z fill:#g1g,stroke:#100,stroke-width:20px\r\n\r\nZ-->A(Provision infrastructure)\r\nA-->B>BB(Create roles)\r\nBB --> B(Modify privileges of roles)\r\nB-->C(Create scopes)\r\nC-->D(Create enterprise tenantsenterprises)\r\nD-->E(Create tenant admins)\r\nE-->H(Provision networks)\r\nH-->J(Create virtual datacenters)\r\nJ-->K(Capture VMs)\r\nK-->L(Configure backups)\r\nL-->Q((<fontcolour=f3efe6> * ))\r\n\tstyle Q fill:#f3efe6,stroke:#030300,stroke-width:7px,color:#f3efe6\r\n\r\nsubgraph Provision tenants\r\n B\r\n C\r\n D\r\n E\r\nend"} |
...
Go to Users → Roles
Click the duplicate clone button and click the pencil edit button, OR click the +add button
Enter the Name of the role
To create a global role for all enterprises, select Make this role global
Optionally, to create a list of network addresses from which users with this role can access the platform, enter Allowed CIDRs.
Enter the corresponding External roles, e.g. LDAP group, for the user. This is required in external authentication modes (openid, ldap).
A user's external roles must map to a single role (local or global).
You can also set external scopes.Examples of external roles for LDAP:
ldap_group_01
ldap_group_02
Example for OpenID:
id=admins,ou=group,o=qa,ou=services,dc=openam,dc=forgerock,dc=org
...
...
Modify the privileges of
...
user roles
Select the role
In the Privileges pane, select or deselect the privileges
To add or remove groups of privileges, click the All privileges checkbox beside the group name
You cannot “undo” a set of changes, but you can discard your changes
To save the changes, click Save
The platform will discard your changes if you do an action outside of the Privileges pane, for example, clicking on a another role name- For troubleshooting information, see Manage roles#Role troubleshooting and tips
...