Organizations
Organizations allow you to create a custom hierarchy within your institution and assign management rights to System administrators that take responsibility of a unit within the organization. The organization is the root parent of all sub-organizations within it.
There are three management roles that you can have on an organization: CPOC (Central Point of Contact), ADMIN and SUPERUSER from the least powerful to the most powerful. If you have a role on an organization you will have at least that role on all its sub-organizations recursively.
Organizations allow you to have a view of a group of users budgets, consumption, resources and manage their permissions, limits and cloud accounts budgets.
Organization managers can easily:
Create sub-organizations
Add/remove users from an organization
Assign managers to the organization
Setting a default perspective
Assigning a set of cloud permissions
Setting limits
Changing the appearance and description
Managing Organizations
Action/Role | CPOC | ADMIN | SUPERUSER |
---|---|---|---|
Delete the organization |
| ✔ | ✔ |
Create a sub-organization | ✔ | ✔ | ✔ |
Add a user |
| ✔ | ✔ |
Remove a user |
| ✔ | ✔ |
View the organization managers | ✔ | ✔ | ✔ |
Add a manager |
| ✔ | ✔ |
Remove a manger |
| ✔ | ✔ |
Set Regions, Instance Types, Services | ✔ | ✔ | ✔ |
Stop All, Terminate All | ✔ | ✔ | ✔ |
Cleanup All |
|
| ✔ |
Go to Cloud Console |
|
| ✔ |
Masquerade as user |
|
| ✔ |
Download, Reset credentials |
|
| ✔ |
Organizations rules
To create sub-organizations you need to be a manager of at least one Organization.
All sub-organizations should have names that start with the capitalized subdomain of the root organization plus a dash “-”
If you are the CPOC or ADMIN of an organization, you will have an ADMIN role on sub-organizations that you create. If you are a SUPERUSER of an organization you will be a SUPERUSER of all its sub-organization
You can add a user to an organization where you are ADMIN if you have CPOC role or above on that user
You can add a user to an organization where you are SUPERUSER if you already have a SUPERUSER role on that user
Removing a user from an organization removes the user from all its sub-organizations recursively
You can add/remove a manager that has a role which is the same or below yours on that organization
Manage an Organization:
As an organization manager, you can take actions on users, assign managers, delete the organization, reset all users emails, reset all users password.
Add/Remove users: Users can be added or removed from the Users panel
Create Organization: You can create a sub-organization of any organization that you manage
Show Cloud Accounts: Opens a Cloud Accounts view whilst filtering only on the cloud accounts linked to the organization
Assign Managers: You can only assign managers with roles at most equal to yours. You can only assign managers from organizations that you manage.
Assign Roles: You can assign region roles, cloud services roles, instance types roles to change the permissions of all users under the organization
Set Limits: You can set the limits for all users under an organization (maximum number of instances, maximum disk size, maximum storage size ...)
Set Perspective: You can enforce a perspective on all users of an organization.
Set Billing Code and Purchase Order: You can set the billing code and purchase order of an organization.
Customize: You can change the appearance, description and label of an organization
Delete: You need to have an ADMIN role on the organization
Formations:
Set Default Formation Uids: Sets default formations for the organization
Launch organization Formations: Launches all default formations of the organization
Shutdown Organization Formation instances: Shutdown all compute instances linked to the default formations of the organization
Stop Organization Formation instances: Stop all compute instances linked to the default formations of the organization
Start Organization Formation instances: Start all compute instances linked to the default formations of the organization
Delete Organization Formation instances: Delete all compute instances linked to the default formations of the organization
Root
Set Whitelisted domains: Sets whitelisted email domains for the organization, anyone registering with an email ending with a whitelisted domain is automatically processed after verifying his/her email
Get Credentials as CSV: Export the selected organization users credentials in a CSV file
Reset User Passwords: You need to be a SUPERUSER of the organization to reset the RosettaHUB passwords of the users that belong to the organization
Reset User Emails: You need to be a SUPERUSER of the organization, emails of users who belong to the organization will be reset to RosettaHUB ending with subdomain.rosettahub.com
13. Registrations → Enable/Disable: You can enable or disable applicants from registering to the organization