Page History

There are several concepts you need to understand when administering VCL.

Resources

VCL manages sets of resources. There are four types of resources: images, computers, management nodes, and schedules. Each of these resources types are described below.

...

Any image in an image group can be run on any computer in a computer group to which it is mapped (provided a user has sufficient privileges to do so). There are a few things this allows you to do. If you have incompatible hardware, you would create separate computer groups for each type. Then, you would have image groups corresponding to each type so that you don't end up with VCL trying to deploy images from one type of hardware to an incompatible type of hardware. Another thing you can do with the mapping is to partition off parts of your hardware. For example, if you had a set of users purchase their own hardware to be managed by VCL, you could map only their image groups to their computer groups.

Resource Grouping and Mapping are illustrated by the following diagram. The blue boxes represent resources. The green boxes represent resource groups. Arrows between blue and green boxes show where grouping occurs. Purple barbells represent resource mapping. The special case of assigning a schedule to a computer is represented by an orange barbell between the blue computer and schedule boxes.

Privileges

Users are granted access to parts of the VCL web site and to resources through the Privilege tree. User permissions and resource attributes can both be cascaded down from one node to all of its children. Additionally, cascaded user permissions and resource attributes can be blocked at a node so that they do not cascade down to that node or any of its children.

User Permissions

There are nine 11 user permissions that can be granted to users. They can be granted to users directly or to user groups.

• computerAdmin - allows users to do administrative tasks with computers in computer groups with administer or manageGroup granted at the same node
• groupAdmin - grants users access to the Manage Groups portion of the site
• imageAdmin - allows users to do administrative tasks with images in image groups with administer or manageGroup granted at the same node
• imageCheckOut - allows users to make reservations for images in image groups with available granted at the same node
• mgmtNodeAdmin - allows users to do administrative tasks with management nodes in management node groups with administer or manageGroup granted at the same node
• nodeAdmin - allows users to add and delete child nodes at the specified node
• resourceGrant - grants users access to control what resource attributes are assigned at the same node
• scheduleAdmin - allows users to do administrative tasks with schedules in schedule groups with administer or manageGroup granted at the same node
• serverCheckOut - allows users to make reservations through the Server Profiles part of the site where they can deploy long term reservations and allow other users access to the reservations
• serverProfileAdmin - allows users to manage the Server Profiles part of the site
• userGrant - grants users access to control what user permissions are assigned at the same node

...