Setting Up a Tenant

Lists the process for setting up a tenant.

About this task

To set up a tenant:

Procedure

  1. On the server:
    1. Log in to the cluster as the administrator and create a user (for the tenant admin) on the cluster.
      The user (for the tenant) must exist on all the cluster nodes with the same UID and GID or all the cluster nodes must connect to the same LDAP server. See Managing Users and Groups for more information.
      NOTE
      The superuser for a tenant, referred to as tenant admin, must have a UID of 0 on the tenant host(s) to access the tenant volume (only) and all data in the tenant volume. Although the tenant admin has the same UID as the HPE Ezmeral Data Fabric superuser, the tenant admin does not have the same level of access and administration privileges as the HPE Ezmeral Data Fabric superuser because the tenant admin’s access is based on the tenant ticket and is restricted to the tenant volume.
    2. Generate a tenant ticket for the user.
      For more information, see Generating a Ticket for a Tenant.
    3. Copy the ticket to the tenant host and grant the tenant administrator read access to the ticket.
    4. Create a volume (or share) on the cluster for the tenant.
      For more information, see Creating a Volume for a Tenant.
  2. On the tenant instance:
    1. Log in as tenant administrator (root).
    2. Mount the filesystem using loopbacknfs or the FUSE-based POSIX client.
      For more information, see Mounting a Tenant Volume.
      NOTE
      While starting the POSIX client, use the tenant ticket configured in step 1.
    3. As tenant admin, grant access to users by setting permissions to data using either file ACEs or mode bits.
      For more information, see Enabling and Restricting Access to Tenant Volume and Data.