Multitenancy on

Overview

Mon, 17 Feb 2025 00:00:00 +0000

OpenNebula includes a complete user and group management system.

The resources a user may access in OpenNebula are controlled by a permissions system that resembles the typical UNIX one. By default, only the owner of a resource can use and manage it. Users can easily share the resources by granting use and can manage permissions to other users in their group, or to any other user in the system.

Users

Mon, 17 Feb 2025 00:00:00 +0000

OpenNebula supports user accounts and groups. This guide shows how to manage users; groups are explained in their own guide. To manage user rights, visit the Managing ACL Rules guide.

A user in OpenNebula is defined by a username and a password. You don’t need to create a new Unix account in the Front-end for each OpenNebula user, they are completely different concepts. OpenNebula users are authenticated using a session string (with <user>:<password> format), this is included in every operation and validated by OpenNebula service.

Groups

Mon, 17 Feb 2025 00:00:00 +0000

A group in OpenNebula makes it possible to isolate users and resources. A user can see and use the shared resources of other users.

The group is an authorization boundary for the users, but you can also partition your cloud infrastructure and define which resources are available to each group by using Virtual Data Centers (VDC). You can read more about OpenNebula’s approach to VDCs and the cloud from the perspective of different user roles in the Understanding OpenNebula guide.

VDCs

Mon, 17 Feb 2025 00:00:00 +0000

A VDC (Virtual Data Center) defines an assignment of one or several groups to a pool of physical resources. This pool of physical resources consists of resources from one or several Clusters that could belong to different Zones or public external clouds for hybrid cloud computing. You can read more about OpenNebula’s approach to VDCs and the cloud from the perspective of different user roles in the Understanding OpenNebula guide.

Sunstone Views

Mon, 17 Feb 2025 00:00:00 +0000

Using the OpenNebula FireEdge Sunstone Views you will be able to provide a simplified UI aimed at end users of an OpenNebula cloud. The OpenNebula FireEdge Sunstone Views are fully customizable, so you can easily enable or disable specific information tabs or action buttons. You can define multiple views for different user groups. You can define multiple views for different user groups. Each view defines a set of UI components, so each user just accesses and views the relevant parts of the cloud for their role. Default views:

Permissions and ACLs

Mon, 17 Feb 2025 00:00:00 +0000

Most OpenNebula resources have associated permissions for the owner, the users in the owner’s group, and others. For each one of these groups there are three rights that can be set: USE, MANAGE, and ADMIN. These permissions are very similar to those of UNIX file system.

The resources with associated permissions are Templates, VMs, Images and Virtual Networks. The exceptions are Users, Groups and Hosts.

Managing Permission through the CLI

This is how the permissions look in the terminal:

Accounting

Mon, 17 Feb 2025 00:00:00 +0000

The accounting toolset visualizes and reports resource usage data. This accounting tool addresses the accounting of the virtual resources. It includes resource consumption of the Virtual Machines as reported from the hypervisor.

Usage

oneacct - prints accounting information for Virtual Machines

Usage: oneacct [options]
 -s, --start TIME First day of the data to retrieve
 -e, --end TIME Last day of the data to retrieve
 -u, --userfilter user User name or id to filter the results
 -g, --group group Group name or id to filter the results
 -H, --host HOST Host name or id to filter the results
 --xpath XPATH_EXPRESSION Xpath expression to filter the results. For
 example: oneacct --xpath 'HISTORY[ETIME>0]'
 -x, --xml Show the resource in xml format
 -j, --json Show the resource in json format
 --split Split the output in a table for each VM
 -v, --verbose Verbose mode
 -h, --help Show this message
 -V, --version Show version and copyright information
 --describe Describe list columns
 -l, --list x,y,z Selects columns to display with list command
 --csv Write table in csv format
 --user name User name used to connect to OpenNebula
 --password password Password to authenticate with OpenNebula
 --endpoint endpoint URL of OpenNebula XML-RPC front-end

The time can be written as month/day/year hour:minute:second, or any other similar format, e.g., month/day hour:minute.

Showback

Mon, 17 Feb 2025 00:00:00 +0000

The showback toolset reports resource usage cost and allows the integration with chargeback and billing platforms. The toolset generates showback reports using the information retrieved from OpenNebula.

Set the VM Cost

Each VM Template can optionally define a cost (see the syntax here). The cost is defined as cost per cpu per hour, and cost per memory MB per hour. The cost units are abstract and their equivalent to monetary or other cost metrics have to be defined in each deployment.