As a cloud administrator, you manage both projects and users. Projects are organizational units in the cloud to which you can assign users. Projects are also known as tenants or accounts.You can manage projects and users independently from each other.
Users are members of one or more projects.
During cloud set up, the operator defines at least one project, user, and role. The operator links the role to the user and the user to the project. Roles define the actions that users can perform. As an administrator, you can create additional projects and users as needed.
Learn how to add, update, and delete projects and users, assign users to one or more projects, and change or remove the assignment. To enable or temporarily disable a project or user, update that project or user. You can also change quotas at the project level. For information, see the section called “View and manage quotas”.
When you create a user account, you must assign the account to a primary project. Optionally, you can assign the account to additional projects. Before you can delete a user account, you must remove the user account from its primary project.
When you disable a project, it has the following consequences:
In the dashboard, users can no longer access the project from the CURRENT PROJECT drop-down list on the Project tab.
Users who are members of only the disabled project can no longer log in.
You cannot launch instances for a disabled project. Instances that are already running are not automatically terminated though—you must stop them manually.
The data for a disabled project is maintained so that you can enable the project again at any time.
When you disable a user account, the user can no longer log in, but the data for the user is maintained so that you can enable the user again at any time.
Log in to the dashboard and choose the admin project from the CURRENT PROJECT drop-down list.
On the Admin tab, click the Projects category.
Click .
On the Project Info tab in the Create Project window, enter a name and description for the project. By default, the project is enabled. See the section called “Consequences of disabling projects and users”.
On the Project Members tab, add members to the project.
On the Quota tab, edit quota values. For information about quotas, see the section called “View and manage quotas”.
Click .
The Projects category shows the project, including its assigned ID.
You can update a project to change its name or description, and enable or temporarily disable it.
On the Admin tab, click the Projects category.
Select the project that you want to update.
In the More drop-down list, click Edit Project.
In the Edit Project window, you can update a project to change its name or description, and enable or temporarily disable it.
By default, the project is enabled. To temporarily disable it, clear the Enabled check box. To enable a disabled project, select the Enabled check box.
Click .
When you create users, you must assign them to a primary project as described in the section called “Create a user account”. You can assign users to additional projects or update and remove assignments.
On the Admin tab, select the Projects category.
Select a project to modify its user assignments.
Select .
The Edit Project window shows the following lists of users:
All Users. Users that are available to be assigned to the current project.
Project Members. Users that are assigned to the current project,
To assign a user to the current project, click for the user.
The user moves from the All Users list to the Project Members list.
To remove a user from the current project, click the button for the user.
The user moves from the Project Members list to the All Users list.
Click .
On the Admin tab, click the Projects category.
Select the projects that you want to delete.
Click to confirm the deletion.
![[Note]](../common/images/admon/note.png)
Note You cannot undo the delete action.
Log in to the dashboard and choose the admin project from the CURRENT PROJECT drop-down list.
On the Admin tab, select the Users category.
Click .
In the Create User window, enter a user name, email, and preliminary password for the user. Confirm the password.
Select a project from the Primary Project drop-down list.
Choose a role for the user from the Role drop-down list. Default is
Member.Click to confirm your changes.
Respond to the prompt to remember the password for the user.
The dashboard assigns an ID to the user, and the user appears in the Users category.
On the Admin tab, select the Users category.
Select the user that you want to disable or enable. You can disable or enable only one user at a time.
In the Actions drop-down list, select Disable User or Enable User.
In the Enabled column, the enabled value updates to either
TrueorFalse.
On the Admin tab, select the Users category.
Select the users that you want to delete.
Click Delete Users.
In the Confirm Delete Users window, click to confirm the deletion.
Security groups are sets of IP filter rules that are applied to all project instances, and which define networking access to the instance. Group rules are project specific; project members can edit the default rules for their group and add new rule sets.
All projects have a default security group that is applied to any instance that has no other defined security group. Unless you change the default, this security group denies all incoming traffic and allows only outgoing traffic to your instance.
| Note |
|---|---|
For information about updating global controls on the command line, see the section called “Manage project security”. |
Log in to the dashboard as a project member.
On the Project tab, select the appropriate project from the drop-down list, and click the category.
On the Security Groups tab, click .
Provide a name and appropriate description for the group, and click . By default, the new rule provides outgoing access rules for the group.
Log in to the dashboard as a project member.
On the Project tab, select the appropriate project from the drop-down list, and click the category.
On the Security Groups tab, click for the appropriate security group.
To add a rule, click . Set the attributes for the rule, and click :
- IP Protocol
The IP protocol to which the rule applies:
TCP.Typically used to exchange data between systems, and for end-user communication.
UDP. Typically used to exchange data between systems, particularly at the application level.
ICMP. Typically used by network devices, such as routers, to send error or monitoring messages.
- Open
For TCP or UDP rules, the Port or Port Range to open for the rule. Choose to open a single port or range of ports.
For a range of ports, enter port values in the From Port and To Port fields.
For a single port, enter the port value in the Port field.
- Source
The source of the traffic for this rule:
CIDR (Classless Inter-Domain Routing). IP address block, which limits access to IPs within the block. Enter the CIDR in the Source field.
Security Group. Source group that enables any instance in the group to access any other group instance.
Log in to the dashboard as a project member.
On the Project tab, select the appropriate project from the drop-down list, and click the category.
On the Security Groups tab, click for the appropriate security group.
To delete a rule, select the rule and click .
