9.2 Cloud Manager Roles

A user must have one or more Cloud Manager roles in order to do anything in Cloud Manager. There are nine Cloud Manager roles. All nine roles can be given to System users, while only four of the roles can be given to Organization members. Each role carries its own set of rights and responsibilities for the Cloud Manager system or for an organization within the system.

9.2.1 Descriptions

Table 9-1 defines the 11 roles that you can hold as a System user. Each role carries its own set of responsibilities for the Cloud Manager system or for an organization within the system.

Table 9-1 System User Roles

Key	System User Role	Rights
CA	Cloud Administrator	Has full rights to the Cloud Manager system. Can perform all tasks in the system.
ZA	Zone Administrator	Has rights to manage the resources for one or more assigned zones. Only System users can be Zone Administrators.
CM	Catalog Manager	Has rights to create, modify, and delete workload templates. Workload templates must be assigned to organizations by the Cloud Administrator.
A	Approver	Has rights to approve or deny a business service request based on available zone and organization resource capacity.
BA	Build Administrator	Has rights to complete pre-build and post-build configuration for workloads in requested business services.
BGV	Business Group Viewer	Has rights to view business services for a business group.
BSO	Business Service Owner	Has rights to create, modify, and delete business services for an organization or for specific business groups within an organization.
OM	Organization Manager	Has rights to manage users, roles, resource assignments, and business services within an assigned organization. Both System users and Organization users can be Organization Managers. System users can be assigned as Organization Managers in multiple organizations. Organization users can be assigned as Organization Managers only in their own organization.
SM	Sales Manager	Has rights to view users, roles, resource assignments, and business services within an assigned organization. Both System users and Organization users can be Sales Managers. System users can be assigned as Sales Managers in multiple organizations. Organization users can be assigned as Sales Managers only in their own organization. Can create quotes for an organization in Cloud Marketplace.
S	Sponsor	Has rights to approve or deny a business service request based on financial reasons.
SV	System Viewer	Has rights to view anything in the Cloud Manager system, but cannot perform any tasks. Only System users can be System Viewers.

Table 9-2 defines the 5 roles that you can hold as Organization roles. Both Organization users and System users can be assigned these roles.

Table 9-2 Organization Roles

Key	Organization Role	Rights
BGV	Business Group Viewer	Has rights to view business services for a business group.
BSO	Business Service Owner	Has rights to create, modify, and delete business services for an organization or for specific business groups within an organization.
OM	Organization Manager	Has rights to manage users, role assignments, resource assignments, and business services within an assigned organization. System users can be assigned as Organization Managers in multiple organizations. Organization users can be assigned as Organization Managers only in their own organization.
SM	Sales Manager	Has rights to view users, roles, resource assignments, and business services within an assigned organization. Both System users and Organization users can be Sales Managers. System users can be assigned as Sales Managers in multiple organizations. Organization users can be assigned as Sales Managers only in their own organization. Can create quotes for an organization in Cloud Marketplace.
S	Sponsor	Has rights to approve or deny a business service request based on financial reasons.

9.2.2 Rights

Table 9-3 System Management

System Management Rights
Roles (See Table 9-1)	CA	ZA	CM	A	BA	BGV	BSO	OM	SM	S	SV
USERS
Create System user accounts and user groups, either manually or by importing from an LDAP directory
Modify System user and user group properties (email, phone number, and so forth)
ROLES
Assign Cloud Administrator role
Assign Zone Administrator role
Assign Catalog Manager role
Assign Build Administrator role
Assign Approver role
Assign System Viewer role
CAPACITY AND REPORTS
View resource capacity for system
Generate resource capacity reports for system

Table 9-4 Zone Management

Zone Management Rights
Roles (See Table 9-1)	CA	ZA	CM	A	BA	BGV	BSO	OM	SM	S	SV
Assign Zone Administrator role
Create, modify, retire, and delete zones
Create, modify, and delete resource groups for zones
View resource capacity for zones
Generate resource capacity reports for zones

Table 9-5 Organization Management

Organization Management Rights
Roles (See Table 9-1)	CA	ZA	CM	A	BA	BGV	BSO	OM	SM	S	SV
USERS
Create Organization user accounts and user groups, either manually or by importing from an LDAP directory
Modify Organization user and user group properties (email, phone number, etc.)
ROLES
Assign Organization Manager role
Assign Sponsor role
Assign Business Group View role
Assign Business Service Owner role
Assign Sales Manager role
ORGANIZATIONS
Create modify, and delete organizations
Assign a cost factor (discount or markup) to organizations*
Assign resource groups to organizations
Assign workload templates to organizations
Assign networks to organizations
BUSINESS GROUPS
Create modify, and delete business groups
Assign workload templates from an organization to its business groups
Assign resource groups from an organization to its business groups
Assign networks from an organization to its business groups
View information and business services for business groups
CAPACITY AND REPORTS
View resource capacity for organizations
Generate resource capacity reports for organizations

* Applies only to an Organization Manager who is a System user. An Organization Manager who is a member of the organization cannot change the cost factor for the organization.

Table 9-6 Resource Management

Resource Management Rights
Roles (See Table 9-1)	CA	ZA	CM	A	BA	BGV	BSO	OM	SM	S	SV
RESOURCE GROUPS
Create, modify, and delete resource groups
Assign resource groups to organizations
Assign resource groups to an organization’s business groups
SERVICE LEVELS
Create modify, retire, and delete service levels
Create modify, and delete service level objectives
Assign resource costs to service levels
Assign service levels to resource groups
CAPACITY AND REPORTS
View resource capacity for organizations
View resource capacity for zones
View resource capacity for the system
Generate resource capacity reports for organizations
Generate resource capacity reports for zones
Generate resource capacity reports for the system

Table 9-7 Catalog Management

Catalog Management Rights
Roles (See Table 9-1)	CA	ZA	CM	A	BA	BGV	BSO	OM	SM	S	SV
Assign Catalog Managers
Create, modify, retire, and delete workload templates
Assign workload templates to organizations

Table 9-8 Business Service Management

Business Service Management Rights
Roles (See Table 9-1)	CA	ZA	CM	A	BA	BGV	BSO	OM	SM	S	SV
Import existing VMs as business services
Request new business services
Request changes to existing business services
Provide Administrator approval or rejection of business service requests (new and change)
Provide Sponsor approval or rejection of business service requests (new and change)
Complete pre- and post-build workload configuration tasks for business service requests (new and change)
Delegate business service ownership to other users
Lifecycle business service workloads
Remotely access business service workloads
View business services
Delete business services

9.2.3 Rights by Organization Role

Table 9-9 Organization Management

Organization Management
Roles (See Table 9-2)	BGV	BSO	OM	SM	S
USERS
Create Organization user accounts and user groups, either manually or by importing from an LDAP directory
Modify Organization user and user group properties (email, phone number, etc.)
ROLES
Assign Organization Manager role
Assign Sponsor role
Assign Business Group View role
Assign Business Service Owner role
BUSINESS GROUPS
Create modify, and delete business groups
Assign workload templates from an organization to its business groups
Assign resource groups from an organization to its business groups
Assign networks from an organization to its business groups
View information and business services for a business group
CAPACITY & REPORTS
View resource capacity for organization
Generate resource capacity reports for organization

Table 9-10 Resource Management

Resource Management
Roles (See Table 9-2)	BGV	BSO	OM	SM	S
RESOURCE GROUPS
Assign resource groups to an organization’s business groups
CAPACITY AND REPORTS
View resource capacity for organization
Generate resource capacity reports for organization

Table 9-11 Business Service Management

Business Service Management
Roles (See Table 9-2)	BGV	BSO	OM	SM	S
Request new business services
Request changes to existing business services
Provide Sponsor approval or rejection of business service requests (new and change)
Delegate business service ownership to other users
Cycle (start, suspend, stop) business service workloads
Remotely access business service workloads
View business services
Delete business services
Generate reports for business service costs