You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Pablo Endres <pa...@innovo-cloud.de> on 2013/07/17 11:49:17 UTC

User management / Roles

Hi,

I've been trying to find the best way to manage my users in ACS, especially
to find a way for to be able to create users under an account without being
root or admin of the whole ACS.

So basically what I'm aiming to have is 4 roles:

   1. Admin - ACS SysAdmin
   2. DomainAdmin - Should be able to create accounts in his domian, and
   not be able to see other domains
   3. AccountAdmin - Is the main user of an account. He can create other
   users and manage anything in his account.. -> SysAdmin for an Account
   4. AccountUser - End user for an account. He can create and manage his
   machines or those in a project he takes part of, but not those of other
   users


Can anyone give me a tip in the right direction?
Thanks in advance.


Best regards / Mit freundlichen Grüßen,
Pablo Endres

Re: User management / Roles

Posted by Pablo Endres <pa...@innovo-cloud.de>.
Hi Geoff,

thanks. It is more or less what my tests told me, but there is always
someone out their that has more experience.

Best regards / Mit freundlichen Grüßen,
Pablo Endres


On Wed, Jul 17, 2013 at 12:34 PM, Geoff Higginbottom <
geoff.higginbottom@shapeblue.com> wrote:

> Pablo,
>
> Currently the only type of account that can create new Accounts and Users
> are Root Admins.
>
> Domain Admins are best considered as 'Power Users' as they have no actual
> admin rights.
>
> Regards
>
> Geoff Higginbottom
>
> D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581
>
> geoff.higginbottom@shapeblue.com
>
> -----Original Message-----
> From: Pablo Endres [mailto:pablo.endres@innovo-cloud.de]
> Sent: 17 July 2013 10:49
> To: users@cloudstack.apache.org
> Subject: User management / Roles
>
> Hi,
>
> I've been trying to find the best way to manage my users in ACS,
> especially to find a way for to be able to create users under an account
> without being root or admin of the whole ACS.
>
> So basically what I'm aiming to have is 4 roles:
>
>    1. Admin - ACS SysAdmin
>    2. DomainAdmin - Should be able to create accounts in his domian, and
>    not be able to see other domains
>    3. AccountAdmin - Is the main user of an account. He can create other
>    users and manage anything in his account.. -> SysAdmin for an Account
>    4. AccountUser - End user for an account. He can create and manage his
>    machines or those in a project he takes part of, but not those of other
>    users
>
>
> Can anyone give me a tip in the right direction?
> Thanks in advance.
>
>
> Best regards / Mit freundlichen Grüßen,
> Pablo Endres
> This email and any attachments to it may be confidential and are intended
> solely for the use of the individual to whom it is addressed. Any views or
> opinions expressed are solely those of the author and do not necessarily
> represent those of Shape Blue Ltd or related companies. If you are not the
> intended recipient of this email, you must neither take any action based
> upon its contents, nor copy or show it to anyone. Please contact the sender
> if you believe you have received this email in error. Shape Blue Ltd is a
> company incorporated in England & Wales. ShapeBlue Services India LLP is
> operated under license from Shape Blue Ltd. ShapeBlue is a registered
> trademark.
>
>

RE: User management / Roles

Posted by Geoff Higginbottom <ge...@shapeblue.com>.
Pablo,

Currently the only type of account that can create new Accounts and Users are Root Admins.

Domain Admins are best considered as 'Power Users' as they have no actual admin rights.

Regards

Geoff Higginbottom

D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581

geoff.higginbottom@shapeblue.com

-----Original Message-----
From: Pablo Endres [mailto:pablo.endres@innovo-cloud.de]
Sent: 17 July 2013 10:49
To: users@cloudstack.apache.org
Subject: User management / Roles

Hi,

I've been trying to find the best way to manage my users in ACS, especially to find a way for to be able to create users under an account without being root or admin of the whole ACS.

So basically what I'm aiming to have is 4 roles:

   1. Admin - ACS SysAdmin
   2. DomainAdmin - Should be able to create accounts in his domian, and
   not be able to see other domains
   3. AccountAdmin - Is the main user of an account. He can create other
   users and manage anything in his account.. -> SysAdmin for an Account
   4. AccountUser - End user for an account. He can create and manage his
   machines or those in a project he takes part of, but not those of other
   users


Can anyone give me a tip in the right direction?
Thanks in advance.


Best regards / Mit freundlichen Grüßen,
Pablo Endres
This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.