Create a scope for an administrator

The default cloud administrator with the default Global Scope can manage all resources. To restrict the set of resources that an administrator can manage, create a scope and assign it to the administrator. An administrator (with privileges and allowed datacenters):

• can manage the locations (datacenters and public cloud regions) that are in their scope (e.g. add templates for an enterprise in scope)
• can manage enterprises and users of the enterprises that are in their scope

To create a basic administrator scope:

1. Create a scope for the administrator
   1. On the General info tab, optionally select a parent scope, for example, the Global scope or a reseller scope
      
   2. Go to the Entities tab. In the Enterprises list, select the enterprises to administer
   3. In the Datacenters list, select the appropriate locations (datacenters and public cloud regions) to administer
      
      

 For example, for a Managed Service Provider in Spain, with datacenters in Madrid, Barcelona, Valencia, and Seville. The scopes could be defined as follows:

• User scope for datacenters:
  • An administrator for "Spain" with a scope to access to all the Spanish datacenters
  • An administrator for "Eastern Spain" with a scope to access the datacenters in Barcelona and Valencia (the cities on the east coast of Spain)
• User scopes for enterprises:
  • An administrator for Spain may have a scope to access the top-level "Spanish HQ" to manage its users and resources. This scope may be the parent of one or more scopes to group users for management and resource sharing

Notes:

• If allowed datacenters are not in scope, the administrator can work in them as a regular user (e.g. create virtual datacenters, deploy VMs) 
• If enterprises are in a child scope, the administrator can share catalog resources with them