Changes to scopes from Abiquo 4.0
- Now administrators assign scopes to Abiquo users. In previous versions, administrators assigned scopes to Abiquo roles and the global scope was the default
- During the upgrade process to version 4.0, Abiquo assigns role scopes to users
- All enterprises must now have a default scope for creating users
- Administrators can now create optional hierarchies of scopes and share resources, such as templates and specs, with tenants at lower levels of their hierarchies
Scope concepts
The following screenshot shows a scope with enterprises and a child scope
Scope use cases
A global managed service provider could create a scope for country or region. For example, in Spain, with datacenters in Madrid, Barcelona, Valencia and Seville.
- User scope for datacenters: An administrator for Spain would have access to all these datacenters, but the administrator for Eastern Spain would only have access to Barcelona and Valencia, which are on the east coast of Spain.
- User scopes for enterprises: The administrator for Spain may have scope for Spain that only includes the top-level Spanish national organization to manage its users and resources.
- Scope hierarchy: The administrator for Spain could also have a scope hierarchy beneath the Spain scope that includes the scopes for Eastern Spain and Central and Southern Spain and then their customers at a lower level. The administrator for Spain can only manage the users of the Spanish national organization but they can share templates and Vapp specs with tenants in the scopes at all levels of the hierarchy.
Diagram: an example of a scope hierarchy
Managing Scopes
Privilege: Manage scopes, Allow user to switch enterprises
To manage scopes, go to Users → Scopes.
Create or Modify a Scope
To create or modify a scope do these steps:
- Click the add or edit button
- Enter the scope name
- Optional: to add the scope to a hierarchy, select a parent scope. You cannot use all enterprises or use all datacenters under a hierarchy
- Select enterprises and datacenters to include in the scope
- The options to Use all enterprises or Use all datacenters will automatically include new enterprises or datacenters
Screenshot: an unlimited enterprises and datacenters scope.
To change an unlimited scope to a limited scope, first unselect the Select all checkbox, then select individual resources. You cannot remove an enterprise from a scope that is using shared templates with that scope. You cannot modify the default Global scope. You cannot modify your own scope. After you create or modify a scope, you can assign it to a user or a resource.
Delete a scope
You cannot delete the default Global scope. You cannot delete your own scope. You cannot delete a scope if it is in use in certain circumstances, for example, if it is the default for an enterprise, or it is assigned to a shared template that is in use by an enterprise. To delete a scope, select it in the list and click the delete button.
Manage scopes with the API
Related pages
- Manage cloud tenants: Manage Enterprises
- Create roles with privileges to control access to platform actions: Manage Roles
- Manage Users