This feature enables users to outsource the management of their VMs to the provider or enable the provider to supply datacenter services within the tenant's virtual datacenter.

Abiquo supports provider services at the VM configuration level with restricted virtual appliances (VApps). Abiquo VApps contain groups of VMs that can be related. You can perform actions on all the VMs in a VApp, for example, you can deploy them together. Any user with the privilege to Restrict a VM can move a VM to a restricted VApp, even if they cannot manage or view the restricted VApp. This feature works with the Move VM functionality.

A cloud user could simply mark a checkbox to outsource a VM. Whereas the administrator can select or create a new restricted VApp.

A restricted VApp is invisible to the cloud user but it is still part of the VDC with access to VDC resources, the administrator can manage it as usual, and it is accounted in the platform as part of the tenant's resources.

See Move a VM to a restricted virtual appliance.