This page describes how to onboard an Azure CSP and/or an AWS organization account and its customers into the multicloud platform as part of a reseller hierarchy.
1. Create public cloud regions
Create public cloud regions for your public cloud providers.
For more details see Create a public cloud region
2. Prepare Abiquo entities
To use an Azure reseller (CSP) account or an AWS partner account, create a reseller scope for your reseller enterprise. And create a reseller enterprise to manage the reseller credentials for your customers.
To prepare Abiquo entities for resellers.
Create a reseller scope:
For the Name, we recommend that you use the Reseller name + Scope, for example,
ResellerScope
For the Parent scope select the
Global scope
or no scopeFor Entities, select your public cloud regions.
Create a reseller enterprise:
For the Default scope select the reseller scope, for example,
ResellerScope
Select the Reseller checkbox
If the reseller will use a different mail server to the cloud platform, enter the details of the Mail server
For Datacenters, select the datacenters and public cloud regions that the reseller will use
References:
3. Onboard an Azure CSP
For Azure, you can use reseller credentials (CSP credentials) in Abiquo.
To obtain Azure CSP credentials, do the steps at: Obtain Azure ARM pricing credentials for CSP
In Abiquo, edit the reseller enterprise
Go to Credentials → Pricing, and add the Azure CSP pricing credentials as follows
API key:
csp#tenantId#clientId#accessToken#refreshToken
API secret key: the password for the application
Go to Properties, and to use Azure billing, enter the billing enterprise properties in the reseller enterprise. The default values are as follows:
azurecompute-arm_discount = 0
azurecompute-arm_currency_code = USD
billing.azure.country_code = US
azurecompute-arm_price_factor = 1 (deprecated in Abiquo 6.1)
For Abiquo 6.1 and above, go to Pricing → Price factors and create a price factor for the reseller enterprise. See Manage price factors.
4. Onboard an AWS organization
Log in to the AWS management account.
Create a user with the security policy for AWS organization pricing
Edit the Abiquo reseller enterprise:
Go to Credentials → Pricing and add the user credentials
Go to Properties and add AWS enterprise properties to the reseller
For Abiquo 6.1 and above, go to Pricing → Price factors and create a price factor for the reseller enterprise. See Manage price factors.
5. Prepare Abiquo entities to onboard a customer
You can create a tenant hierarchy with a reseller scope at the top level and the customers below that. To create customers of your reseller, for each customer, create a customer scope and set the reseller scope as the parent scope.
For each customer of the CSP, create a key node enterprise with the customer scope.
For each customer, for each Azure Plan subscription or AWS ? account, create a standard enterprise (subtenant) to use the subscription for compute features or displaying billing information.
To prepare Abiquo entities to onboard a customer:
Create a customer scope:
Go to Users → Scopes and click the + add button or select and edit an existing scope
For the Name, we recommend that you use the customer name and
Scope
, for example,Customer1Scope
For the Parent scope, select the reseller scope, for example,
ResellerScope
.
For the Entities, select the public cloud region/s.
Create a customer enterprise:
Go to Users view and at the bottom of the Enterprises list, click the + add button
For the Default scope, select the customer scope, for example,
Customer1Scope
Select the Key node checkbox to support
Office365 customers
Multiple Azure subscriptions (Plans)
Other sub-tenants (e.g. AWS partner accounts)
For Properties, add tenant metadata as required. This may include account IDs and discounts. You can also push this metadata to VM variables but do not use confidential data.
For each subscription in an Azure plan, create a standard enterprise (subtenant):
Create a standard enterprise (not a key node)
For the Default scope, select the
Customer1Scope
6. Onboard an Azure CSP customer
You can onboard a CSP customer with access to compute and billing features or with access to billing only. If your CSP customer is working with Azure plans, then add credentials for each subscription within the Azure plan to a separate Abiquo enterprise.
To give a CSP customer access to compute and billing features:
Create an app in the customer’s Active Directory.
Edit the standard enterprise, and go to Credentials → Public
Add the credentials for customer in the format
Subscription#AppID#TenantID
Go to Properties and add
azurecompute-arm_only_bill_subscription
and set the value totrue
To give the customer access billing features only (including dashboard display, and billing of Office 365):
Edit the standard enterprise, and go to Credentials → Public
For the Access key ID, enter the customer’s subscription details in this format:
Subscription##TenantID
For the Secret access key, enter any value
Select Only for billing
Click Add account to save the credentials. The platform will not validate the account details until it retrieves billing data from the provider
Go to Properties and add
azurecompute-arm_only_bill_subscription
and set the value totrue
Click Save
Now you can configure the MicrosoftProductsService to manage Customer users, office licenses and Azure plan subscriptions!
7. Onboard an account under an AWS organization
To onboard an account under an AWS organization:
Create a customer scope under the reseller scope
Create a key node enterprise in the customer scope
Create a standard enterprise in the customer scope
Log in to AWS and in the customer account, create a user
In Abiquo, edit the standard enterprise and add the credentials as public cloud credentials.
OR Add the account to the standard enterprise as billing only public cloud credentials.
8. Onboard an AWS organization into a key node
If your customer has an AWS organization account, you can onboard the organization into a key node hierarchy, by adding the pricing credential and accounts.
Create a customer scope under the reseller scope
Create a key node enterprise in the customer scope
Do the steps in “Onboard an AWS Organization” section using the new organization, but add the credentials to the key node as pricing credentials (instead of adding the credentials to the reseller as pricing credentials)
To add an existing account in this organization:
Create a standard enterprise in the scope of the key node
Log in to AWS and in the customer account, create a user
In Abiquo, edit the standard enterprise and add the credentials as public cloud credentials.
OR Add the account to the standard enterprise as billing only public cloud credentials.
Next steps
Run billing for the reseller - edit the enterprise and go to Credentials → Pricing and click the right arrow button, or go to the Billing tab, select the provider, and click Regenerate billing. You can try to run billing for the last 2 months to display it on the Abiquo dashboard
If the credentials have compute capabilities, and there are VMs for the subscription, you can capture the VMs to manage them with Abiquo by onboarding their virtual network or VPC to create a virtual datacenter in Abiquo. See Onboard from public cloud
To configure currency conversion for UI dashboard, see Configure billing dashboard currency conversions