7.2

Table Of Contents
The following diagram shows a multitenant deployment with centrally managed infrastructure. The IaaS
administrator in the default tenant congures all infrastructure sources that are available for all tenants. The
IaaS administrator can organize the infrastructure into fabric groups according to type and intended
purpose. For example, a fabric group might contain all virtual resources, or all Tier One resources. The
fabric administrator for each group can allocate resources from their fabric groups. Although the fabric
administrators exist only in the default tenant, they can assign resources to business groups in any tenant.
Note Some infrastructure tasks, such as importing virtual machines, can only be performed by a user with
both the fabric administrator and business group manager roles. These tasks might not be available in a
multitenant deployment with centrally managed infrastructure.
Figure 2. Multitenant Example with Infrastructure Configuration Only in Default Tenant
Tenant
admin
Tenant A
Business
group mgr
Business
Group
Business
group mgr
Business
Group
http://vra.mycompany.com/
vcac/org/tenanta/
Tenant
admin
Tenant B
Business
group mgr
Business
Group
Business
group mgr
Business
Group
http://vra.mycompany.com/
vcac/org/tenantb/
Tenant
admin
Tenant C
Business
group mgr
Business
Group
Business
group mgr
Business
Group
http://vra.mycompany.com/
vcac/org/tenantc/
Default
Tenant
(System and
infrastructure config)
System
admin
Fabric
admin
IaaS
admin
Fabric Group
Reservation Reservation
Fabric
admin
Fabric Group
Resv Resv
Resv
Fabric
admin
Fabric Group
Resv Resv
Resv
Infrastructure Fabric
Hypervisors
Public
clouds
Physical
servers
http://vra.mycompany.com/vcac/
The following diagram shows a multitenant deployment where each tenant manages their own
infrastructure. The system administrator is the only user who logs in to the default tenant to manage
system-wide conguration and create tenants.
Each tenant has an IaaS administrator, who can create fabric groups and appoint fabric administrators with
their respective tenants. Although fabric administrators can create reservations for business groups in any
tenant, in this example they typically create and manage reservations in their own tenants. If the same
identity store is congured in multiple tenants, the same users can be designated as IaaS administrators or
fabric administrators in each tenant.
Foundations and Concepts
VMware, Inc. 15