问题

在Prism Central（AHV-NO vCenter）中管理数千个VM

o

问候 - 我很好奇较大的Nutanix（超过20K VM）在VM管理方面所做的事情。假设vCenter/vmm不在图片中，这都是本地AHV/Prismentral环境。但是，在全国各地散布着各种VM管理员，需要访问自己的群集的VM（而不是主机），而这些群集仍在集中进行管理。您是否有可以权限的文件夹/OU类型的构造？在同一集群中的多个应用程序所有者怎么样？您可以在App-Allinger-y只看到/访问自己的VM时仅访问App-Anlower-X访问其VM吗？

在这一点上，真的只是学习这种规模的VM管理是否能够在较大的AHV/PRISM环境中？感谢您的任何见解！

Greetings all--\u00a0 I\u2019m curious what larger Nutanix (over 20k VMs) are doing when it comes to VM management.\u00a0 Let\u2019s say vCenter\/VMM are out of the picture and it\u2019s all a native AHV\/PrismCentral environment; however, it\u2019s got clusters scattered all over the country with various VM admins needing access to their own cluster\u2019s VMs (not hosts) while the clusters are all still being managed centrally.\u00a0 Is there a folder\/OU type of construct that you can permission out?\u00a0 How about multiple application owners within the same cluster-- can you give app-owner-x access to just their VMs while app-owner-y only sees\/accesses their own VMs?<\/p>

Really just learning at this point if that kind of scaled out VM management is capable with large AHV\/Prism environments?\u00a0 Thanks for any insights!<\/p>","quoteUsername":"osburnm","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

该主题已关闭以供评论

2个答复

t
徽章 +1

我将PC连接到使用LDAP的Active Directory，并将其用于管理 - >项目和角色。

我将角色和项目分配给Active Directory组，并在VM上使用“管理所有权”将项目分配给VM。
您也可以转到“管理”→角色页面，选择一个角色并执行“管理分配”。

I connect PC to active directory with LDAPS and use it with\u00a0Administration ->\u00a0Project and\u00a0Roles.<\/p>

I assign\u00a0roles to projects and projects to active directory groups and assign the project to VM\u2019s with \u201cmanage ownership\u201d on the VM.
You can also go to the Administration \u2192 Roles page, select a role and go \u201cManage Assignment\u201d.<\/p>","quoteUsername":"Tedevil","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

阿罗纳
秩
UserLevel 6
徽章 +5

嘿，奥斯伯姆，

首先，欢迎来到Nutanix世界。

运行本机Nutanix管理程序 - AHV意味着您没有或需要vCenter或任何其他第三方管理控制台。vCenter和SCVMM仅在分别部署ESXI或Hyper-V时才需要。

安全指南AOS 5.18：控制用户访问（RBAC）- 是从许可方面开始的地方。

从指南：
在配置角色分配时，您可以指定各种用户/实体关系。为了说明，在下面的示例中，第一行将MY_CUSTOM_ROLE分配给两个VM（normal_VM和test_andrey）的单个用户（SSP_ADMIN）。第二行将角色分配给两个类别（4GCC1Z）的两个用户（Locus1和locus2）。第三行再次将角色分配给用户locus1，但这次是所有子网。

在组织环境方面，PC具有类别的运行，可以使您对团队实体的灵活性，但是您喜欢通过应用程序，通过与多个类别相关联。可以将此标签用于VM，图像，蓝图，簇等。

有关类别的更多信息Prism Central指南：类别管理。

我希望这是有帮助的。

请让我知道您是否还有其他问题。

Hey osburnm,<\/p>

First things first, welcome to Nutanix world.<\/p>

Running native Nutanix hypervisor \u2013 AHV implies that you do not have or need vCenter or any other third party management console. vCenter and SCVMM are only necessary when deploying ESXi or Hyper-V respectively.<\/p>

Security guide AOS 5.18: Controlling User Access (RBAC)<\/a> - is a place to begin with regards to permissions.<\/p>

From the guide:
You can specify various user\/entity relationships when configuring the role assignment. To illustrate, in the following example the first line assigns the my_custom_role to a single user (ssp_admin) for two VMs (normal_vm and test_andrey). The second line assigns the role to two users (locus1 and locus2) for a single category (4gcC1Z). The third line again assigns the role to the user locus1 but this time for all subnets.<\/p><\/blockquote>

\"//www.jhbzcj.com/next/ncm-intelligent-operations-formerly-prism-pro-ultimate-26/\"<\/figure>

In terms of organizing the environment, PC operates with categories which gives you flexibility to group entities however you like be it geographically, by apps, both by associating with more than one category. This labeling can be done to VMs, images, blueprints, clusters, etc.<\/p>

More on categories Prism Central Guide: Category Management.<\/a><\/p>

I hope this is helpful.<\/p>

Let me know if you have further questions, please.<\/p>","quoteUsername":"Alona","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

条款和条件
Learn more about our cookies.<\/a>","cookiepolicy.button":"Accept cookies","cookiepolicy.button.deny":"Deny all","cookiepolicy.link":"Cookie settings","cookiepolicy.modal.title":"Cookie settings","cookiepolicy.modal.content":"We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.<\/a>","cookiepolicy.modal.level1":"Basic
Functional","cookiepolicy.modal.level2":"Normal
Functional + analytics","cookiepolicy.modal.level3":"Complete
Functional + analytics + social media + embedded videos"}}}">
Baidu