Creating and managing tenants or sub-tenants
This topic includes:
About tenants and sub-tenants
In Blue Planet Orchestration you can create tenants to allow administrators and other users to access specific resources or applications.
Tenants are groupings of users and associated resources that form a common reference for orchestrating instantiated resources and services.
Blue Planet orchestration includes a master tenant. Administrators can use the master tenant, as well as create other sub-tenants to create organizational structures in managed domains.
For example, organize orchestration resource access by assigning users to tenants associated with specific leased-operators or customers of a service provider. Another example is to manage domain access by creating specific domain accounts tenants such as OpenStack controller context where a tenant may be equivalent to a project.
The Blue Planet user access control (UAC) app controls system back-end processes such as multi-tenancy. Access UAC using the UI or the REST API.
Administrators set up UAC, but each Blue Planet app is responsible for implementing those rules.
Keep the following rules and guidelines in mind when creating and using tenants and sub-tenants:
-
Only a user with the sysadmin role in the master tenant can create a new tenant.
-
The master tenant sees all sub-tenant resources.
-
Sub-tenants see resources within that tenant only.
-
A user belongs to one and only one tenant.
-
A persistent database stores all activities related to user administration of tenants.
-
Admin-created sub-tenant users access only the sub-tenant where they have privileges.
-
You can only deactivate tenants, not delete them.
Your system administrator assigns your user ID to a tenant. If you are unable to access applications or devices, contact your system administrator for privileges.
Adding and editing tenants
To view and manage tenants:
-
From the main window, select System > User activities > Tenants.
-
To create a new tenant:
-
Click Create.
-
Enter the required data into the form.
Ensure you select Active to activate this tenant. -
Click Save.
-
-
To edit an existing tenant:
-
Select the tenant from the tenant list.
-
Click Edit.
-
Update the data in the form and click Save.
-
Inactive users appear in red in the user accounts list.
Deactivating tenants
To deactivate a tenant:
-
From the main window, select System > User activities > Tenants.
-
Select the tenant from the tenant list.
-
Click Edit.
-
Deselect Active and click Save.