The Agent VM associated with an Onboarded Cluster initially hosts only the workload of the owning/onboarding organization. The Provider Administrator user can choose to share this environment with other organizations via the Data Management for VMware Tanzu console or API.
Each organization sharing an environment is permitted to access and manage only its own workloads in the environment.
When you share environment among multiple organizations:
- The Local Repository and Cloud Repository that you configure for the Agent VM is shared across all organizations that are using the environment.
- Data Management for VMware Tanzu cannot guarantee 10 parallel deployments per organization.
- A user from any organization can pull logs from the environment.
- All databases provisioned in the Onboarded Cluster are addressed using the same fully-qualified domain name suffix. Data Management for VMware Tanzu does not support sharing environment when the organizations have different domain names.
You can also remove an organization's access to an environment.
Audience
These procedures are performed by a Data Management for VMware Tanzu user in the Provider Administrator role.
Sharing Environment
Prerequisites
Before you share existing environment with a new organization, ensure that:
- You can identify the Agent VM IP address of the environment that you want to share.
- This environment has enough resources to accommodate the projected additional database deployments.
- You can identify the name of the organization.
Procedure
Perform the following procedure to share an existing environment with a new organization:
Select Environment from the left navigation pane.
This action displays the Environment view, a table that lists the currently onboarded environment.
Examine the environments listed in the table, identify the environment that you want to share, and navigate to that table row.
Click the environment Cluster Name.
The environment information Details tab displays.
Locate the Organizations section of the pane and click ADD in the upper right corner.
The Add Organization to Share dialog displays.
Use the drop-down list to select the Organization with which you want to share the environment, and then click CONFIRM.
Data Management for VMware Tanzu initiates the task and adds the organization to the table.
Removing Environment Access from an Organization
When you no longer want an organization to access certain environment, you remove the organization's access to the environment. You can remove access from an organization only if the organization does not own any running databases in the environment.
Prerequisites
Before you remove environment access from an organization, ensure that:
- You can identify the Agent VM IP address of the environment.
- You can identify the name of the organization.
- The environment does not host any databases deployed by the organization's users. You must remove any such databases from the environment.
Procedure
Perform the following procedure to remove environment access from a specific organization:
Select Environment from the left navigation pane.
This action displays the Environment view, a table that lists the currently onboarded environment.
Examine the environments listed in the table, identify the environment that you want to share, and navigate to that table row.
Click the environment Cluster Name.
The environment information Details tab displays.
Locate the Organizations pane.
Examine the organizations listed in the table, identify the organization from which you want to remove access, and navigate to that table row.
Click the three vertical dots in the Action column, and select Remove from the pop-up menu.
The Remove Organization dialog displays.
If you are certain that you want to remove the organization's access to this environment, click CONFIRM.
Data Management for VMware Tanzu initiates the task.
Note: If the operation succeeds, the environment is no longer a database deployment target for users in the organization.
