Skip to main content

User Roles in Virtana Platform

When the Virtana Platform account is set up, an organization is created as part of the platform, with an administrative user associated with it. This user can invite additional users to the organization. Thereafter, anyone assigned an administrator role can invite users.

If you have an Enterprise License, you can have multiple parent organizations at a peer level. You can also have sub-organizations in a child relationship to the parent organization. Each organization and sub-organization has the same roles available and the same privileges associated with the roles.

Users can be assigned the following roles, with associated privileges:

Role permissions overview

This table provides a quick comparison of the key capabilities and restrictions associated with each user role in the Virtana Platform.

Capability

Administrator

MSP Administrator

Reader

Data Ingester

View dashboards

Tick_sym.png

Tick_sym.png

Tick_sym.png

Cross_sym.png

Manage users

Tick_sym.png

Tick_sym.png

Cross_sym.png

Cross_sym.png

Edit platform settings

Tick_sym.png

Tick_sym.png

Cross_sym.png

Cross_sym.png

Alert actions

Tick_sym.png

Tick_sym.png

Cross_sym.png

Cross_sym.png

Cloud cost management

Tick_sym.png

Tick_sym.png

View only

Cross_sym.png

API Ingest

Cross_sym.png

Cross_sym.png

Cross_sym.png

Tick_sym.png

Modify policies

Tick_sym.png

Tick_sym.png

Cross_sym.png

Cross_sym.png

Administrator

Use this role for users who manage a single organization.

An Administrator can:

  • Have the admin rights that are limited to a single organization.

  • Access to all management functions available in the Settings.

  • Access to all Virtana Platform modules that are licensed and installed for the organization.

  • Create, edit, or manage user accounts.

  • Access key dashboards, such as Cluster Overview, On-Premises Storage Array Cost & Capacity Summary, and On-Premise Compute Cost and Capacity dashboards and alerts from all clusters and  appliances for which access is granted using Data Access Group(s).

  • Acknowledge alert, execute various OOB actions on the alert.

  • View and modify alert enrichment and response policies.

  • Access to reports and policy configuration.

MSP Administrator

Use the MSP Administrator role for users who manage multiple customer organizations.

An MSP Administrator can:

  • Manage multiple organizations, users, and roles.

  • Access to all management functions available in the Settings.

  • Access to all Virtana Platform modules for the organizations they manage.

  • Create, edit, or manage user accounts.

  • Access key dashboards, such as Cluster Overview, On-Premises Storage Array Cost & Capacity Summary, and On-Premise Compute Cost and Capacity dashboards and alerts from all clusters and  appliances for which access is granted using Data Access Group(s).

  • Acknowledge alert, execute various OOB actions on the alert.

  • View and modify alert enrichment and response policies.

  • Access to reports and policy configuration.

Reader

Use the Reader role for users who must view data but not change configuration.

A Reader can:

  • Has read-only access to an organization specified by an administrator.

  • View users from the given organization in the Settings.

  • View key dashboards, such as Cluster Overview, On-Premises Storage Array Cost & Capacity Summary, and On-Premise Compute Cost and Capacity dashboards and alerts from all clusters and  appliances for which access is granted using Data Access Group(s).

  • View the executed actions report.

  • View alert enrichment and response policies.

  • View cloud integration in .

A Reader cannot modify reports and policies in .

Data Ingester

Use the Data Ingester role for non-interactive clients that send data by API. Do not assign this role to human users.

A Data Ingester can:

  • Ingest metric and external alerts in the VP platform.

  • This role can only be available while creating client credentials that can be used to communicate with the VP platform using APIs.

A Data Ingester cannot:

  • Sign in to the UI.

  • View dashboards, alerts, or reports.

  • Manage users, policies, or integrations.