cloudstack/docs/tmp/en-US/html/configuring-projects.html

185 lines
14 KiB
HTML
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.2. Configuring Projects</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.8" /><meta name="package" content="Apache_CloudStack-Admin_Guide-4.0.0-incubating-en-US-1-" /><link rel="home" href="index.html" title="CloudStack Administrator's Guide" /><link rel="up" href="projects.html" title="Chapter 6. Using Projects to Organize Users and Resources" /><link rel="prev" href="projects-overview.html" title="6.1. Overview of Projects" /><link rel="next" href="create-new-projects.html" title="6.3. Creating a New Project" /></head><body><p id="title"><a class="left" href="http://cloudstack.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.cloudstack.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="projects-overview.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="create-new-projects.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="section" id="configuring-projects" lang="en-US"><div class="titlepage"><div><div><h2 class="title" id="configuring-projects">6.2. Configuring Projects</h2></div></div></div><div class="para">
Before CloudPlatform users start using projects, the CloudPlatform administrator must set up various systems to support them, including membership invitations, limits on project resources, and controls on who can create projects.
</div><div xml:lang="en-US" class="section" id="set-up-invitations" lang="en-US"><div class="titlepage"><div><div><h3 class="title" id="set-up-invitations">6.2.1. Setting Up Invitations</h3></div></div></div><div class="para">
CloudStack can be set up either so that project administrators can add people directly to a project, or so that it is necessary to send an invitation which the recipient must accept. The invitation can be sent by email or through the users CloudStack account. If you want administrators to use invitations to add members to projects, turn on and set up the invitations feature in CloudStack.
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Log in as administrator to the CloudStack UI.
</div></li><li class="listitem"><div class="para">
In the left navigation, click Global Settings.
</div></li><li class="listitem"><div class="para">
In the search box, type project and click the search button.
</div></li><li class="listitem"><div class="para">
In the search box, type project and click the search button.
<span class="inlinemediaobject"><img src="./images/search-button.png" alt="searchbutton.png: Searches projects" /></span>
</div></li><li class="listitem"><div class="para">
In the search results, you will see a few other parameters you need to set to control how invitations behave. The table below shows global configuration parameters related to project invitations. Click the edit button to set each parameter
</div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th align="left">
<div class="para">
Configuration Parameters
</div>
</th><th align="left">
<div class="para">
Description
</div>
</th></tr></thead><tbody><tr><td align="left">
<div class="para">
project.invite.required
</div>
</td><td align="left">
<div class="para">
Set to true to turn on the invitations feature.
</div>
</td></tr><tr><td align="left">
<div class="para">
project.email.sender
</div>
</td><td align="left">
<div class="para">
The email address to show in the From field of invitation emails.
</div>
</td></tr><tr><td align="left">
<div class="para">
project.invite.timeout
</div>
</td><td align="left">
<div class="para">
Amount of time to allow for a new member to respond to the invitation.
</div>
</td></tr><tr><td align="left">
<div class="para">
project.smtp.host
</div>
</td><td align="left">
<div class="para">
Name of the host that acts as an email server to handle invitations.
</div>
</td></tr><tr><td align="left">
<div class="para">
project.smtp.password
</div>
</td><td align="left">
<div class="para">
(Optional) Password required by the SMTP server. You must also set project.smtp.username and set project.smtp.useAuth to true.
</div>
</td></tr><tr><td align="left">
<div class="para">
project.smtp.port
</div>
</td><td align="left">
<div class="para">
SMTP servers listening port.
</div>
</td></tr><tr><td align="left">
<div class="para">
project.smtp.useAuth
</div>
</td><td align="left">
<div class="para">
Set to true if the SMTP server requires a username and password.
</div>
</td></tr><tr><td align="left">
<div class="para">
project.smtp.username
</div>
</td><td align="left">
<div class="para">
(Optional) User name required by the SMTP server for authentication. You must also set project.smtp.password and set project.smtp.useAuth to true..
</div>
</td></tr></tbody></table></div></li><li class="listitem"><div class="para">
Restart the Management Server
</div><pre class="programlisting">service cloud-management restart</pre></li></ul></div></div><div xml:lang="en-US" class="section" id="set-resource-limits-for-projects" lang="en-US"><div class="titlepage"><div><div><h3 class="title" id="set-resource-limits-for-projects">6.2.2. Setting Resource Limits for Projects</h3></div></div></div><div class="para">
The CloudStack administrator can set global default limits to control the amount of resources that can be owned by each project in the cloud. This serves to prevent uncontrolled usage of resources such as snapshots, IP addresses, and virtual machine instances. Domain administrators can override these resource limits for individual projects with their domains, as long as the new limits are below the global defaults set by the CloudStack root administrator. The root administrator can also set lower resource limits for any project in the cloud
</div><div xml:lang="en-US" class="section" id="set-per-project-resource-limits" lang="en-US"><div class="titlepage"><div><div><h4 class="title" id="set-per-project-resource-limits">6.2.2.1. Setting Per-Project Resource Limits</h4></div></div></div><div class="para">
The CloudStack root administrator or the domain administrator of the domain where the project resides can set new resource limits for an individual project. The project owner can set resource limits only if the owner is also a domain or root administrator.
</div><div class="para">
The new limits must be below the global default limits set by the CloudStack administrator (as described in <a class="xref" href="configuring-projects.html#set-resource-limits-for-projects">Section 6.2.2, “Setting Resource Limits for Projects”</a>). If the project already owns more of a given type of resource than the new maximum, the resources are not affected; however, the project can not add any new resources of that type until the total drops below the new limit.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Log in as administrator to the CloudStack UI.
</div></li><li class="listitem"><div class="para">
In the left navigation, click Projects.
</div></li><li class="listitem"><div class="para">
In Select View, choose Projects.
</div></li><li class="listitem"><div class="para">
Click the name of the project you want to work with.
</div></li><li class="listitem"><div class="para">
Click the Resources tab. This tab lists the current maximum amount that the project is allowed to own for each type of resource.
</div></li><li class="listitem"><div class="para">
Type new values for one or more resources.
</div></li><li class="listitem"><div class="para">
Click Apply.
</div></li></ol></div></div><div xml:lang="en-US" class="section" id="set-global-project-resource-limits" lang="en-US"><div class="titlepage"><div><div><h4 class="title" id="set-global-project-resource-limits">6.2.2.2. Setting the Global Project Resource Limits</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Log in as administrator to the CloudStack UI.
</div></li><li class="listitem"><div class="para">
In the left navigation, click Global Settings.
</div></li><li class="listitem"><div class="para">
In the search box, type max.projects and click the search button.
</div></li><li class="listitem"><div class="para">
In the search results, you will see the parameters you can use to set per-project maximum resource amounts that apply to all projects in the cloud. No project can have more resources, but an individual project can have lower limits. Click the edit button to set each parameter.
<span class="inlinemediaobject"><img src="./images/edit-icon.png" alt="editbutton.png: Edits parameters" /></span>
</div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><tbody><tr><td align="left">
<div class="para">
max.project.public.ips
</div>
</td><td align="left">
<div class="para">
Maximum number of public IP addresses that can be owned by any project in the cloud. See About Public IP Addresses.
</div>
</td></tr><tr><td align="left">
<div class="para">
max.project.snapshots
</div>
</td><td align="left">
<div class="para">
Maximum number of snapshots that can be owned by any project in the cloud. See Working with Snapshots.
</div>
</td></tr><tr><td align="left">
<div class="para">
max.project.templates
</div>
</td><td align="left">
<div class="para">
Maximum number of templates that can be owned by any project in the cloud. See Working with Templates.
</div>
</td></tr><tr><td align="left">
<div class="para">
max.project.uservms
</div>
</td><td align="left">
<div class="para">
Maximum number of guest virtual machines that can be owned by any project in the cloud. See Working With Virtual Machines.
</div>
</td></tr><tr><td align="left">
<div class="para">
max.project.volumes
</div>
</td><td align="left">
<div class="para">
Maximum number of data volumes that can be owned by any project in the cloud. See Working with Volumes.
</div>
</td></tr></tbody></table></div></li><li class="listitem"><div class="para">
Restart the Management Server.
</div><pre class="programlisting"># service cloud-management restart</pre></li></ol></div></div></div><div xml:lang="en-US" class="section" id="set-projects-creator-permissions" lang="en-US"><div class="titlepage"><div><div><h3 class="title" id="set-projects-creator-permissions">6.2.3. Setting Project Creator Permissions</h3></div></div></div><div class="para">
You can configure CloudStack to allow any user to create a new project, or you can restrict that ability to just CloudStack administrators.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Log in as administrator to the CloudStack UI.
</div></li><li class="listitem"><div class="para">
In the left navigation, click Global Settings.
</div></li><li class="listitem"><div class="para">
In the search box, type allow.user.create.projects.
</div></li><li class="listitem"><div class="para">
Click the edit button to set the parameter.
<span class="inlinemediaobject"><img src="./images/edit-icon.png" alt="editbutton.png: Edits parameters" /></span>
</div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><tbody><tr><td align="left">
<div class="para">
allow.user.create.projects
</div>
</td><td align="left">
<div class="para">
Set to true to allow end users to create projects. Set to false if you want only the CloudStack root administrator and domain administrators to create projects.
</div>
</td></tr></tbody></table></div></li><li class="listitem"><div class="para">
Restart the Management Server.
</div><pre class="programlisting"># service cloud-management restart</pre></li></ol></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="projects-overview.html"><strong>Prev</strong>6.1. Overview of Projects</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="create-new-projects.html"><strong>Next</strong>6.3. Creating a New Project</a></li></ul></body></html>