2.5

One or more resource bundles can be assigned to an organization, but a resource bundle cannot be shared
across organizations. This restriction provides resource isolation, enhances security, and helps to ensure
compliance with Oracle licensing requirements by enabling organizations with Oracle databases to use only
the vSphere resources dedicated for Oracle use. Organizations do not compete for available resources and do
not have access to each others' CPU, memory, storage, and network resources.
Storage resources are the datastores and allocation amounts for database data and backups. Network resources
are the network or networks that are available to the resource bundle and that provide the network(s) for
databases. Data Director system administrators can set up separate networks to provide database isolation.
Organization administrators can subdivide resource bundles across several database groups within their
organization.
Databases draw their resources from their parent database groups, which draw their resources from their
parent organizations. Organizations draw their resources from the Data Director system.
Managing Organization Users
Data Director organization administrators control user access, roles, permissions, and privileges within their
organizations.
Organization administrators control which users can access their organizations and what those users can do.
Only organization administrators can grant access to their organizations and assign roles to users within their
organizations.
NOTE vCloud Director organizations and users can be managed only from vCloud Director. See the vCloud
Director documentation for details.
Users can belong to multiple organizations and can be granted multiple roles within those organizations in
either By Organization or Global mode systems.
n
In a By Organization system, each organization has a distinct user list that is not visible to other
organizations. To join an organization, users send a request to the organization administrator, or the
organization administrator can invite a user to join.
n
In a Global system, the user list for the system is visible to all organizations. All users belong to all
organizations. Organization administrators grant roles to users to enable them to perform tasks in the
organization.
Organization administrators can grant any roles defined within their organizations to organization users. In
By Organization mode, the user must be on the organization's user list.
Organization administrators control what users can do in their organizations by defining roles, privileges, and
permissions within their organizations, then granting them to organization users. Roles are specific to the
organization in which they are created and are not visible to other organizations.
See Chapter 3, “Managing Users and Roles,” on page 27.
Create a Data Director Organization
The Data Director system administrator creates organizations to allow organization administrators
independent management of their database groups and databases.
Prerequisites
n
Resource bundle(s) must be created and available for allocation.
n
You are logged in as a Data Director system administrator.
Procedure
1 With System selected, click Manage & Monitor.
VMware vFabric Data Director Administrator and User Guide
64 VMware, Inc.