Abiquo scopes are administrator access lists: scopes control which cloud locations (datacenters and public cloud regions) and tenants (Abiquo enterprises) and administrator can manage. In Abiquo 4.0, administrators assign scopes to users instead of user roles, and to facilitate the creation of multiple users with scopes, Abiquo tenants now have a default scope.
Manage tenants
Abiquo tenants (called Abiquo enterprises) will now have a default scope that Abiquo will assign to the tenant’s users. When an administrator creates a tenant, Abiquo assigns the administrator’s scope as the enterprise default scope. Prior to creation, the only scopes that could apply are the default unlimited global scope and an unlimited enterprise scope (that will select all current and future enterprises). After the enterprise is created, the administrator can edit it. The edit dialog will display the default scope. The administrator can change the default scope to any other scope that includes the enterprise.
Manage users
In the dialog to create a user, Abiquo displays the default enterprise scope. The administrator can change this scope for the user, depending on the administrator’s own scope. If the administrator has an unlimited scope (global or enterprise), the administrator can assign an unlimited scope, as well as limited scopes that contain the user’s enterprise. If the administrator has a limited scope, they can only assign lesser scopes, except for the enterprise default scope. If the administrator has a limited scope and they are editing a user with a greater scope, then they can only change the scope to the enterprise default scope.
Manage scopes
The administrator cannot delete a scope if it is the default for an enterprise. The administrator cannot remove an enterprise from a scope if the scope is the default for an enterprise.