Onboard an Azure CSP or AWS organization account

Abiquo reseller hierarchy

This diagram shows a reseller hiearchy to manage Azure CSP or AWS organization accounts and their customers. The documentation below describes how to create this hierarchy.

Prepare a reseller

To prepare a reseller in Abiquo:

1. Create public cloud regions for your public cloud providers. See Create a public cloud region

2. Go to Users → Scopes and Create a reseller scope:

   1. Make the Name descriptive, for example, ResellerNameScope

   2. For the Parent scope select the Global scope (recommended) or no scope

      

   3. For Entities, select your public cloud regions.
      

      

3. Go to Users and Create a reseller enterprise:

   1. For the Default scope select ResellerNameScope

   2. Select the Reseller checkbox

   3. If the reseller will use its own mail server, enter the details of the Mail server
      

      

   4. For Datacenters, select the datacenters and public cloud regions that the reseller and its customers will use, as in the scope.

Onboard an Azure CSP account

To an onboard Azure CSP account:

1. Do the steps to Obtain Azure ARM pricing credentials for CSP

2. To add the Azure credentials in Abiquo, edit the reseller enterprise

   1. Go to Credentials → Pricing, and add the Azure CSP pricing credentials as follows

      1. API key: csp#tenantId#clientId#accessToken#refreshToken

      2. API secret key: the password for the application

         

   2. Go to Properties, and to use Azure billing, enter the https://abiquo.atlassian.net/wiki/spaces/doc/pages/311372059/Display+Azure+billing+data#Enterprise-properties-for-the-Azure-reseller . The default values are as follows:

      1. azurecompute-arm_discount = 0

      2. azurecompute-arm_currency_code = USD

      3. billing.azure.country_code = US

      4. azurecompute-arm_price_factor = 1 (deprecated in Abiquo 6.1)

3. For Abiquo 6.1 and above, go to Pricing → Price factors and create a price factor for the reseller enterprise. See Manage price factors.

Onboard an AWS organization account

To onboard an AWS organization account:

1. Log in to the AWS management account.

2. Create a user with the security policy for AWS organization pricing

3. https://abiquo.atlassian.net/wiki/spaces/doc/pages/311372049/Display+Amazon+billing+data#Configure-AWS

4. Edit the Abiquo reseller enterprise:

   1. Go to Credentials → Pricing and add the user credentials

   2. Go to Properties and https://abiquo.atlassian.net/wiki/spaces/doc/pages/311372049/Display+Amazon+billing+data#Configure-resellers-in-Abiquo

5. For Abiquo 6.1 and above, go to Pricing → Price factors and create a price factor for the reseller enterprise. See Manage price factors.

Prepare to onboard a customer

To prepare Abiquo to onboard a customer:

1. Create a customer scope:

   1. Go to Users → Scopes and click the + add button (or edit an existing customer scope)

      1. For the Name, we recommend that you include the customer name, for example, CustomerScope

      2. For the Parent scope, select the reseller scope, for example, ResellerScope.
         

         

   2. For the Entities, select the datacenters and public cloud region/s.

2. Create a customer enterprise:

   1. Go to Users view and at the bottom of the Enterprises list, click the + add button

   2. For the Default scope, select the customer scope, for example, CustomerScope

   3. Select the Key node checkbox to support Office365 customers, Multiple Azure subscriptions (Plans), and AWS organization accounts, and so on

      

   4. For Properties, add tenant metadata as required

3. For each subscription in an Azure plan or AWS organization, create a standard enterprise:

   1. Create a standard enterprise (not a key node)

   2. For the Default scope, select the CustomerScope
      

      

Onboard an Azure customer for billing only

To give a customer access to billing features only for their tenant (including dashboard display):

1. Under the reseller, edit the customer, key node (for Azure Plans and Office 365), or standard enterprise

2. Go to Credentials → Public

3. For the Access key ID, enter the customer’s TenantID

   

4. Select Only for billing

5. Click Add account to save the credentials. The platform will not validate the account details until it retrieves billing data from the provider

6. Click Save

Onboard an Azure subscription for billing only

To give a customer access to billing features only for their subscription (including dashboard display, and billing of Office 365):

1. Edit the standard enterprise, and go to Credentials → Public

2. For the Access key ID, enter the customer’s subscription details in this format: Subscription##TenantID

3. For the Secret access key, enter any value

4. Select Only for billing

   

5. Click Add account to save the credentials. The platform will not validate the account details until it retrieves billing data from the provider

6. Go to Properties and add azurecompute-arm_only_bill_subscription and set the value to true

7. Click Save

Now you can Add the Microsoft products service to manage Customer users, office licenses and Azure plan subscriptions!

Onboard an Azure customer for compute and billing

To onboard an Azure customer, choose compute and billing features, or billing only.

To give a CSP customer access to compute and billing features:

1. https://abiquo.atlassian.net/wiki/spaces/doc/pages/311370762/Obtain+Azure+ARM+credentials#Create-an-ARM-application-using-Azure-portal in the customer’s Active Directory.

2. Edit the standard enterprise, and go to Credentials → Public

3. Add the credentials for customer in the format Subscription#AppID#TenantID

4. Go to Properties and add azurecompute-arm_only_bill_subscription and set the value to true

Now you can Add the Microsoft products service to manage Customer users, office licenses and Azure plan subscriptions!

Onboard an AWS customer

To onboard a customer of an AWS organization:

1. https://abiquo.atlassian.net/wiki/spaces/doc/pages/311361611/Abiquo+cloud+reseller+guide#Create-a-scope-for-a-reseller-customer under the reseller scope 

2. https://abiquo.atlassian.net/wiki/spaces/doc/pages/311361611/Abiquo+cloud+reseller+guide#Create-a-reseller-customer in the customer scope

3. Create a standard enterprise in the customer scope

4. Log in to AWS and in the customer account, create a user

5. In Abiquo, edit the standard enterprise and add the credentials as public cloud credentials.
   OR Add the account to the standard enterprise with public cloud credentials for billing only. See Add AWS and Azure credentials only for billing

Onboard an AWS organization into a key node

If your customer has an AWS organization account, you can onboard the organization into a key node hierarchy, by adding the pricing credential and accounts.

To onboard an AWS organization into a key node enterprise

1. Create a customer scope under the reseller scope

2. Create a key node enterprise in the customer scope

3. Do the steps in “Onboard an AWS Organization” section using the new organization, but add the credentials to the key node as pricing credentials (instead of adding the credentials to the reseller as pricing credentials)

To add an existing account in this organization:

1. Create a standard enterprise in the scope of the key node

2. Log in to AWS and in the customer account, and create a user.

3. In Abiquo, edit the standard enterprise and add the credentials as public cloud credentials.
   OR Add the account to the standard enterprise as public cloud credentials for billing only. See Add AWS and Azure credentials only for billing

Run billing

You can now run billing for the reseller:

• Edit the enterprise and go to Credentials → Pricing and click the right arrow button:

• Or go to the Billing tab, select the provider, and click Regenerate billing.

You can try to run billing for the last 2 months to display it on the Abiquo dashboard

Or you can wait for the automatic billing process that will run every day. (You can Customize Abiquo billing dashboard processes and configure the billing run with an Abiquo property).

You can also set currency conversions for the billing dashboard. See Configure billing dashboard currency conversions .

Onboard VMs and resources

If the credentials have compute capabilities, and there are VMs for the subscription, you can capture the VMs to manage them with Abiquo by onboarding their virtual network or VPC to create a virtual datacenter in Abiquo. See Onboard from public cloud