vCloud plugin - jobs option

[christophe.niel.AID]

Hello
I'm having an issue with the way the vCloud pluging behaves with Veeam EM, as I need to connect 1 vCloud instance that manage multiple provider datacenter, and with the way it works I can only setup a single Enterprise manager on a vcloud instance

is there a way to either
- prevent job creation for a client
or
- hide the job tab only for certain client org

I can hide the job tab, but that apply to all tenant, or I can limit the scheduling of a new job but I can't prevent a tenant to create its own jobs
I would need a solution to block the creation of jobs for some tenants, is that possible?

(an alternative for my problem would be to allow multiple Enterprise manager URL, on a tenant basis)

thanks in advance for your reply.

Christophe

[veremin]

As far as I recall, by using the scope button in the Cloud Director Self-Service Portal, you can define at the tenant organization level which tabs will be accessible to them. Does this solution work for you, or are you looking for something else?

Thanks!

[christophe.niel.AID]

hello
thanks for the replya and sorry for the long answer, I got caught on another subject and missed your post
I'm not really sure if I missed an option or if you are maybe referring a wrong option

being an EM administrator, I can setup a global option on the plugin allowing the visibility of the option, this global to Enterprise Manager, so it is here I can say "don't show the job"
being an EM admin, I can allow an organazation admin a few limit on job creation, but not prevent job creation at all
being a VCD system admin I can publish or not the whole plugin to a tenant, that is the "scope", either a tenant see the plugin or he doesn't, no "sub option" like tabs. The only option I have is the URL for EM which is global to the vcloud installation, so I cannot have 2 enterprise manager (which is also problematic)
being a VCD "org admin" (the tenant) I can see the tabs anyone above me have allowed me to see (plugin or no plugin, which tabs I can see, and if I can see jobs, I can create jobs with/without limitation)
I may have missed something

here is what the "publish" looks like



here is the whole "administration" I can see as the global administrator


the content of the page is provided by EM and the rights of accessing the portal are provided by EM (which ask if the current user is org admin), vcloud have no bundle rights or custom acl for the self service portal

what I would really want
the plugin having a configuration option in the "administration" tab where I can set EM URL for each tenant (with a "use default" I would have set at system level)
that administration option being included in an ACL pack I can publish or use

I would also want the option to administer my tenant with the "provider account", we (and most of vcloud operators) have their own access without being declared in the tenant users, this is a privilged called the "traverse...", which allow administrator with sufficient right to operate in a tenant (create vm, do stuff) : the veeam plugin fail to recognize these account, so I would need an org admin account in the tenant users to operate the backup in his stead, in most case I can work arround with a special created account in each tenant, but some tenant have switch to SAML and that is not an option anymore

here what it looks like as the system administrator on the "tenant portal"


and on the EM Side, more granularity on the tabs if it is not possible by using "additionnal rights" from vcloud, if you have have additionnal rights in vcloud ( like "view" jobs and "create" jobs that I could then apply to the tenant admin)

as I said, I may be doing something wrong, let me know

Christophe

[veremin]

Unfortunately, I don't have a lab on hand to check my assumption right now, but I was actually talking about this settings page with the Scope button for a particular organization.

You have the option to select a specific organization, click on Scope, and decide which specific tabs from the portal will be available to it - if I remember correctly, by clicking on Scope, you can later prohibit the display of the Jobs tab for members of this organization.

Thanks!