On Bumblebee platform, administrators are organized in the hierarchy shown blow.
There are three concepts: Account, Entity and IAM user. The main purpose is to provide access privileges and flexibility in managing multiple customers.
Account
There is one root account created when a customer creates an account on the platform. This account can create IAM user at this level.
Entity
Entity is an abstract created by Account. An entity may create an IAM user under the entity. A device can be assigned to an entity and become visible only the entity IAM user or the root account IAM user, but not by other entity's IAM users.
To create an Entity, follow the steps below:
Login to the Bumblebee portal
On the left navigation menu, click Entities
Click Add Entity
IAM User
An IAM user may have read and write privilege or read only privilege.
An IAM user associated with the Account have visibility to all entities and devices. An IAM user associated with an Entity only has visibility to
To create an IAM User, follow the steps below:
Login to the Bumblebee portal
On the left navigation menu, click IAM
Click Add IAM User
Assign IAM User to Entity
As seen in the above diagram, an IAM user created with a scope of Entity can manage resources such as CPE devices in that scope. On the other hand, an IAM user with a scope of the root account can all resources except billing.
To assign an IAM user to an Entity, follow the steps below:
Login to the Bumblebee portal
On the left navigation menu, click IAM
Select one IAM user, click Actions
Click Assign Entity
In the drop down menu, select one Entity
The assigned Entity can be changed for an IAM user by going through the above steps again.
Assign CPE Device to Entity
CPE devices are managed by root account and its IAM users. A CPE device can also be assigned to an Entity so that IAM users under the Entity can only manage the set of devices under Entity.
To assign a CPE device to Entity, follow the steps below:
Login to the Bumblebee portal
On the left navigation menu under Intelligent Edge, click
Select a device, click Actions
Click Assign Entity
Example Use case
Bumblebee platform allows IAM users with different scopes to login to the portal and be the administrator for the that scope. This is accomplished by using entities.
In this example, an ISP provider wishes to allow their customers to access the Bumblebee portal for self-service and also receive alert messages. They can accomplish this by creating IAM users under Entities.
Imagine an ISP provider Uni-Tech. Uni-Tech manages many enterprises Internet access. Uni-Tech creates an account on Bumblebee platform. For each of their customers, Uni-Tech creates an Entity. For example, an Entity named Enterprise-A. Under this Entity Enterprise-A, Uni-Tech creates a few IAM users for Enterprise-A admins to login to Bumblebee platform to view the health of the devices.
コメント