Troubleshooting scopes

When you create a scope, the main questions to ask are:

• Will the scope be part of a hierarchy? Select its parent
• Which locations will the user/s administer? Select locations
• Will the user/s directly administer the following? Select after creation!
  • Own enterprise
  • Other enterprises

When you are troubleshooting scopes, consider the following important points

• Administrators can share VM templates and VApp specs with enterprises in scopes beneath their own scope
• Administrators cannot manage the enterprises that are not directly in their user scope
• You can assign a user's scope to resources to share the resources with the enterprises in the scope. The platform will only consider the enterprises in the scope, not the locations
• The platform will only check if a user's enterprise is in a resource's scope. It will not consider the user's scope to determine if they can access a resource
• Examples of other access limitations:
  • To modify VM templates, the administrator must be in the enterprise that created the template
  • To create a new version of a VApp spec, the user must work with a VApp created from the spec in the enterprise that created the spec