[Users] VMWare vSphere resource pools access control like feature?
Hi, in vSphere you can create a resource pool[1] and define to it access control and delegation... <quote> Access control and delegation - When a top-level administrator makes a resource pool available to a department-level administrator, that administrator can then perform all virtual machine creation and management within the boundaries of the resources to which the resource pool is entitled by the current shares, reservation, and limit settings. Delegation is usually done in conjunction with permissions setting </quote> Is it possible in oVirt? The usage here is to assing roles to a resource pool. You could do this with different DC/cluster in oVirt, but it looks like it is impossible if having _just_ one host (thus one DC/cluster). jirib [1] http://pubs.vmware.com/vsphere-50/index.jsp?topic=%2Fcom.vmware.vsphere.resm...
Hi Jiri, Perhaps you are referring to quota (http://www.ovirt.org/Features/Quota) Regards, Maor On 01/09/2013 12:15 PM, Jiri Belka wrote:
Hi,
in vSphere you can create a resource pool[1] and define to it access control and delegation...
<quote> Access control and delegation - When a top-level administrator makes a resource pool available to a department-level administrator, that administrator can then perform all virtual machine creation and management within the boundaries of the resources to which the resource pool is entitled by the current shares, reservation, and limit settings. Delegation is usually done in conjunction with permissions setting </quote>
Is it possible in oVirt? The usage here is to assing roles to a resource pool. You could do this with different DC/cluster in oVirt, but it looks like it is impossible if having _just_ one host (thus one DC/cluster).
jirib
[1] http://pubs.vmware.com/vsphere-50/index.jsp?topic=%2Fcom.vmware.vsphere.resm... _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Hi Jiri, Maor is right. What you are looking for is Quota. See the videos explaining about Quota: http://www.youtube.com/playlist?feature=plcp&list=PL2NsEhIoqsJFf2HWErznfQ-CS5fQdSRGC We'll be more then happy to help and answer questions. Ofri Masad ----- Original Message -----
From: "Maor Lipchuk" <mlipchuk@redhat.com> To: "Jiri Belka" <jbelka@redhat.com> Cc: users@ovirt.org Sent: Wednesday, January 9, 2013 1:34:01 PM Subject: Re: [Users] VMWare vSphere resource pools access control like feature?
Hi Jiri, Perhaps you are referring to quota (http://www.ovirt.org/Features/Quota)
Regards, Maor
On 01/09/2013 12:15 PM, Jiri Belka wrote:
Hi,
in vSphere you can create a resource pool[1] and define to it access control and delegation...
<quote> Access control and delegation - When a top-level administrator makes a resource pool available to a department-level administrator, that administrator can then perform all virtual machine creation and management within the boundaries of the resources to which the resource pool is entitled by the current shares, reservation, and limit settings. Delegation is usually done in conjunction with permissions setting </quote>
Is it possible in oVirt? The usage here is to assing roles to a resource pool. You could do this with different DC/cluster in oVirt, but it looks like it is impossible if having _just_ one host (thus one DC/cluster).
jirib
[1] http://pubs.vmware.com/vsphere-50/index.jsp?topic=%2Fcom.vmware.vsphere.resm... _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
On Wed, 9 Jan 2013 09:26:22 -0500 (EST) Ofri Masad <omasad@redhat.com> wrote:
Hi Jiri,
Maor is right. What you are looking for is Quota. See the videos explaining about Quota: http://www.youtube.com/playlist?feature=plcp&list=PL2NsEhIoqsJFf2HWErznfQ-CS5fQdSRGC
We'll be more then happy to help and answer questions.
Just for archives. VMWare Resource Pool-like feature: * create new quota * add consumer (an user) to quota * assign the quota permissions (an user) - UserVmManager - UserRole * assign the DB permissions (an user) - VmCreator With this setup it seems the user can "inside" his quota create new VM, new VM inherit valid quota name, and cannot see other VMs outside of his "quota pool". I will see more during testings. jbelka
participants (3)
-
Jiri Belka -
Maor Lipchuk -
Ofri Masad