Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents

...

  • User scope for datacenters:

    • An administrator for "Spain" with a scope to access to all the Spanish datacenters

    • An administrator for "Eastern Spain" with a scope to access the datacenters in Barcelona and Valencia (the cities on the east coast of Spain)

  • User scopes for enterprises:

    • An administrator for Spain may have a scope to access the top-level "Spanish HQ" headquarters to manage its users and resources. This scope may be the parent of one or more scopes to group users for management and resource sharing

Notes:

...

  • If enterprises are in a child scope, the administrator can share catalog catalogue resources with them, even if they cannot administer their users.

...

Create a scope to share resources

...

  1. Create administrator roles with the appropriate privileges to manage the resources.

    • To share resources, an administrator must also be able to have the privilege to Allow user to switch enterprises.

  2. Define and create scopes as required.

    • The resource scopes should contain the enterprises that will access the resource

      • The platform allows lets the user to work with a resource if the user is in a tenant enterprise in the resource's scopes. The platform does not check the user's scope

    • To share resources with ALL current and future tenants, use the default Global scope or create an unlimited enterprise scope

    • To allow an administrator to share resources and manage the tenants, add the tenants to the administrator's scope

    • To allow an administrator to share resources without access to the tenants, add the tenants to one or more scopes, and make the administrator's scope the parent scope.

  3. Log in to the enterprise that owns the resources.

    • To modify VM templates, the administrator must be in the enterprise that created the template

    • To create a new version of a VApp spec, the user must work with a VApp created from the spec in the enterprise that created the spec.

  4. Edit a resource and go to Scopes

  5. Select the scopes that contain tenants who will use the resources.

...

  • You can share resources with your own scope and child scopes of your scope

  • Each tenant can belong to more than one scope

  • Each scope can have one parent scope only

  • The platform will only consider the enterprises in the resource scopes, not the locations.

...

Assign scopes to create a reseller hierarchy

You can use a reseller hierarchy for billing, pricing, and to manage and aggregate your cloud costs and usage. To create a reseller hierarchy, assign scopes to reseller, key node, and reseller customer tenants. 

...

  • Basic scope hierarchy: The administrator for Spain could also have a scope hierarchy beneath the Spain scope that includes the scopes for Eastern Spain and Central Spain and Southern Spain and then their customers at a lower level. The administrator for Spain can only manage the users of the Spanish national organization but they can share templates and VApp specs with tenants in the scopes at all levels of the hierarchy.

     A basic scope hierarchy

...

  • You cannot remove an enterprise from a scope that is using shared templates with that scope

  • You cannot modify the default Global scope

  • You cannot modify your own scope

  • In a scope hierarchy, there can only be one reseller and one key node in the scope that defines the hierarchy, which is each enterprise's default scope.

...