Abiquo enables administrators to control the visibility of certain UI elements. This is done through UI configuration and through privileges.
UI configuration
Administrators can control several aspects of Abiquo through UI configuration. For example, they can hide links in footer for About and Support using properties in client-config-custom.json. And they can create display an extra icon in the top menu bar.
Configuration view
Administrators can configure the display of Abiquo Reports and Documentation icons in Configuration View. Visibility of these elements is determined by the appropriate privileges as described in the following section.
Privileges
The Abiquo system of roles and privileges ensures that users only see the views that they can access. This section briefly explains how privileges work in the UI. For full details of privileges, see Manage Roles and Privileges
To enter each of the main Abiquo views, the user requires an access privilege. For example, the "Access Infrastructure view" privilege enables the user to enter the UI section for datacenter compute, networks and storage. This privilege is only available to the Cloud administrator role by default.
The following screenshots of the Abiquo views that can the default Abiquo roles show how access varies between these roles.
The Cloud Admin has a full set of icons on the main menu bar. The Cloud Admin can create enterprises and users, and manage roles and scopes.
By default, the Enterprise Admin can manage resources for their tenant or tenants. As an example, if you decide to allow the tenant admin to manage users, then you can give them access to the Users view, but they will have limited access. For example, you can allow them to administer users of their own tenant only.
By default, the Cloud User role has only the most basic icons on the top menu. This user cannot access the other views, including the Users view.
Enterprise viewer role
At a user level, the default Enterprise viewer role is for a "read only" user of Abiquo and the privileges assigned to this role enable the user to view virtual resources at a basic cloud user level.
Specific element visibility privileges
The following privileges control the display and use of specific features:
- Apps library
- Download VM templates from remote repository (for enterprise administrators)
- Username menu
- Manage provider credentials for public cloud providers (for enterprise administrators)
- Manage user applications for API client applications (for users)
- Virtual machine default credentials privileges button
- Retrieve default VM credentials (for users)