Abiquo enables administrators to control the visibility of certain UI elements. This is done through UI configuration and through privileges.
UI configuration
Examples of UI configuration, use properties in client-config-custom.json:
- Display an extra icon in the top menu bar
- Hide display of custom metrics for Virtual appliances
Configuration view
Examples of UI element visibility in Configuration view:
- Abiquo Reports icon configuration. To control visibility for users, assign Allow access to reports privilege
- Documentation icon configuration
- Display Users view icon
- Display Hard disks tab in VM configuration. To control visibility for users, assign Manage virtual machine hard disks privilege
Privileges and views
The Abiquo system of roles and privileges ensures that the platform only displays what the user can access.
To enter each of the main Abiquo views, the user requires a privilege. See Configure the main menu button bar
For full details of privileges, see Manage Roles and Privileges
Cloud Admin access
The Cloud Admin has a full set of icons on the main menu bar. The Cloud Admin can create enterprises and users, and manage roles and scopes.
Enterprise Admin access
By default, the Enterprise Admin can manage resources for their tenant or tenants. As an example, if you decide to allow the tenant admin to manage users, then you can give them access to the Users view, but they will have limited access. For example, you can allow them to administer users of their own tenant only, without privileges to manage roles and scopes.
User access
By default, the Cloud User role has only the most basic icons of the menu. This user cannot access the other views, including the Users view.
Enterprise viewer role
At a user level, the default Enterprise viewer role is for a "read only" user of Abiquo and the privileges assigned to this role enable the user to view virtual resources at a basic cloud user level.
Privileges and access to UI features
The following privileges are some examples of how to control the display and use of specific features:
- Catalogue
- Download VM templates from remote repository (for enterprise administrators)
- Username or user icon menu
- Manage provider credentials for public cloud providers (for enterprise administrators)
- Manage user applications for API client applications (for users)
- VM default credentials privileges button
- Retrieve default template credentials (for users)
- VM initial password button
- Retrieve virtual machine initial password (of all accessible VMs)
- Restricted virtual appliances
- View restricted VApps and VMs
For full details of privileges, see Privileges