| Table of Contents |
|---|
| Info |
|---|
This page describes the details of some useful permissions for a reseller administrator role.
|
...
Introduction to reseller admin
A reseller admin role can have a range of privileges depending on how you will manage resellers and cloud users on the platform. So how the reseller will "manage its customers" will vary, depending on the privileges.
...
If your reseller will be managing users, in addition to the Manage users privilege that is part of the standard tenant admin role, you can assign additional privileges.
| Tip |
|---|
To access and manage a user role, an administrator role must have the same privileges or more privileges than the user role. When you activate features for users, by adding privileges to user roles, also add these privileges to your administrator roles. |
To allow the reseller to manage enterprises and users in a single pane of glass, and not by switching enterprises, assign the privileges to Manage enterprises and Manage users of all enterprises. This privilege refers to "all enterprises", but it means all enterprises within the administrator's scope.
...
Administrators with the Manage scopes privilege can also assign the enterprise enterprise’s Default scope to users, even if it has more privileges than or is completely different to is higher scope than their own scope! But, if
If you are using data aggregation for resellers or key nodes, the enterprise default enterprise’s Default scope must define the hierarchy for each reseller and key node, so it would not be convenient for the administrator to change it.
...
Shared resource management
If your reseller needs to be able to share resources (VM templates and VApp spec blueprints) to give access to their customers, then your reseller will be able to share templates and specs by selecting (or deselecting) scopes for the templates and specs. The administrator can select their own scope and scopes below that scope in the hierarchy to for templates and specs.
Note that it is possible for enterprises to belong to more than one scope and this means that you can create a scope just to create a group of tenants who will all use the same resources.
...
If your reseller administrator is able to create their own tenant enterprises, Abiquo will automatically add these to the reseller 's scope.
If the reseller's tenants are part of a scope hierarchy and your reseller does not need to manage their users or enterprises, then you can remove them from the reseller's scope. If you wish to allow your reseller to manage their own scope hierarchy, assign the Manage scopes privilege. This means that the reseller can add their tenants to a scope hierarchy beneath their own scope.