Tenant provisioning guide

Flow chart

This flow chart describes the basic process for provisioning enterprise tenants. 

Before you begin

Before you provision tenants:

• We recommend that you provision infrastructure. See Infrastructure provisioning guide

• Optionally, create base pricing models. See Create a new pricing model

Provision tenants

These are the basic steps to provision tenants in Abiquo.

Create user roles

Create user roles from the default roles. You may need a standard user, a tenant administrator, and optionally, a reseller administrator. Reference: Manage roles

1. Go to Users → Roles

2. Click the duplicate clone button and click the pencil edit button, OR click the +add button

3. Enter the Name of the role

4. To create a global role for all enterprises, select Make this role global

5. Optionally, to create a list of network addresses from which users with this role can access the platform, enter Allowed CIDRs.

6. Enter the corresponding External roles, e.g. LDAP group, for the user. This is required in external authentication modes (openid, ldap).
   A user's external roles must map to a single role (local or global).
   You can also set external scopes.

   • Examples of external roles for LDAP:

     • ldap_group_01

     • ldap_group_02

   • Example for OpenID:

     • id=admins,ou=group,o=qa,ou=services,dc=openam,dc=forgerock,dc=org

Open

Role with external roles for OpenID

Modify the privileges of user roles

1. Select the role

2. In the Privileges pane, select or deselect the privileges 

   • To add or remove groups of privileges, click the All privileges checkbox beside the group name

   • You cannot “undo” a set of changes, but you can discard your changes

3. To save the changes, click Save

   •  The platform will discard your changes if you do an action outside of the Privileges pane, for example, clicking on a another role name

   • For troubleshooting information, see Manage roles | Modify the privileges of a role

Create scopes

Create a scope for each tenant, so that each user can only access their own tenant and its resources.
Reference: Manage scopes#Introduction to user scopes

1. Go to Users → Scopes

2. At the bottom of the Scopes list, click +add

3. On the General info tab, select a parent scope, for example, the Global scope or a reseller scope

   Open

   

   Create a scope with general information

4. In the Datacenters list, select the appropriate locations (datacenters and public cloud regions) where the users will work

Create tenant enterprises

Create the tenant enterprise for the scope

1. Go to Users and at the bottom of the Enterprises list, click the + add button

2. On the General tab, for the Default scope select the tenant's scope.
   Abiquo will automatically add the enterprise to its Default scope

3. Optionally, if the enterprise represents the tenant headquarters or similar, select Key node

    

4. Go to Allocation limits and set resource usage limits for the enterprise. Reference: Manage enterprises | Set allocation limits for a tenant

5. On the Datacenters tab, to allow the tenant's users to work in locations, drag providers, datacenters, or regions into Allowed datacenters

6. To configure the tenant in each allowed datacenter or public cloud region, see Configure an enterprise in a cloud location

7. Optionally, add Credentials for public cloud. See Add credentials for public cloud

8. On the Properties tab, for each tenant metadata property, enter a Key and Value, and click Add.
   See Enterprise properties general table and Display cloud provider billing data
   To inject the tenant details into VM metadata, see Manage enterprise credentials and properties | Inject enterprise properties as VM variables

9. Optionally, on the Pricing tab, select a pricing model

10. Click Save.
    The platform will create the enterprise and filter to display this enterprise ONLY. 
    To display other enterprises, click the x beside the enterprise Name in the filter box at the top of the Enterprises list.

Create tenant administrators

Create a tenant administrator user

1. Go to Users → Users

2. If the tenant enterprise is not selected, select it

3. At the bottom of the Users tab, click + add

4. For the Full name, enter the user’s first name and family name

5. For the Role: select ENTERPRISE_ADMIN or similar

6. For the Scope, select the user’s enterprise scope

7. For the Username, enter the name that the user will log in with, which will display in the system

8. For the E-mail, enter the address of the user for platform messages, including password reset. The platform will display the Gravatar icon associated with this address as the user icon

    

9. For Phone number, enter the mobile cell phone number of the user to receive SMS messages if you use this option for two factor authentication

10. Go to Advanced and enter the user’s Public key, which is required for SSH access

11. Optionally, enter Allowed CIDRs from which the user can access the platform

12. We recommend that you select Reset password on next login

13. Optionally, deselect Activated to prevent the user from logging in until this option is selected

    Replace screenshot as enterprise administrator has No VDC restriction, so Limit access to VDCs will not display for this user

Next steps

1. Provision cloud infrastructure networks. See Network provisioning guide

2. Create virtual datacenters. See Manage virtual datacenters

3. Import and capture VMs. See Import and capture virtual machines

4. Configure additional VDC services, such as Backup as a Service - see Abiquo backup plugins and Backup

5. Create cloud users. This is similar to creating a tenant administrator user, but

   1. For the Role, select a standard cloud USER role

   2. Optionally, go to Limit access to VDCs, select the VDCs that the user can access

API how-tos

• https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652329523

• https://abiquo.atlassian.net/wiki/spaces/ABI61/pages/652329414