Enterprise Project

An enterprise project is a way of managing cloud resources where cloud resources and members are centrally managed by project. Common management consoles are oriented to the control and configuration of individual cloud products. The Enterprise Management console, in contrast, is more focused on resource management. It is designed to help enterprises manage cloud-based resources, personnel, permissions, and finances, in a hierarchical manner. It makes it easier to manage companies, departments, and projects.

Users who have enabled the Enterprise Project Management service can use it to manage cloud service resources.

This section is organized as follows:

Binding an Enterprise Project for a Job

You can select an enterprise project during job creation and associate the job with that enterprise project.

  1. Log in to the CS management console. On the Overview page or Job Management page, click Create Job to switch to the Create Job dialog box.
  2. For Enterprise Project, select an enterprise project that you created on the Enterprise Management console.

    For details about how to create an enterprise project on the Enterprise Management console, see Creating an Enterprise Project in the Enterprise Management User Guide.

    The system also has a built-in enterprise project, default. If you do not select an enterprise project for the job, the default project is used instead.

    During job creation, if the job is successfully bound to an enterprise project, the job has been created. If the binding fails, the system sends an alarm and the job fails to be created.

    When you delete a job, the association between the job and its enterprise project is automatically deleted as well.

Binding an Enterprise Project for a Cluster

You can select an enterprise project during cluster creation and associate the cluster with that enterprise project.

  1. Log in to the CS management console. Switch to the Cluster Management page, and click Create Cluster to switch to the Create Cluster page.
  2. For Enterprise Project, select the enterprise project that you created on the Enterprise Management console.

    For details about how to create an enterprise project on the Enterprise Management console, see Creating an Enterprise Project in the Enterprise Management User Guide.

    The system also has a built-in enterprise project, default. If you do not select an enterprise project for the cluster, the default project is used instead.

    During cluster creation, if the cluster is successfully bound to an enterprise project, the cluster has been created. If the binding fails, the system sends an alarm and the cluster fails to be created.

    When you delete a cluster, the association between the cluster and its enterprise project is automatically deleted as well.

Viewing the Enterprise Project Associated with a Job

After a job is created, you can view the enterprise project associated with the job on the Job Management page or the Job Details page.

  1. In the navigation tree on the left pane of the CS management console, choose Job Management to switch to the Job Management page.
  2. In the job list, locate the row where the target job resides and view the enterprise project associated with the job in the Enterprise Project column.
  3. In the row where the target job resides, click the job name in the Name column to switch to the Job Details page. You can view the enterprise project associated with the job.
  4. Click the enterprise project name to view and edit it on the Enterprise Management console.

    When querying the resource list of a specified project on the Enterprise Management console, you can also query the CS resources.

Viewing the Enterprise Project Associated with a Cluster

After a cluster is created, you can view the enterprise project associated with the cluster on the Cluster Management page or the Cluster Details page.

  1. In the navigation tree on the left pane of the CS management console, click Cluster Management to switch to the Cluster Management page.
  2. In the cluster list, locate the row where the target cluster resides and view the enterprise project associated with the cluster in the Enterprise Project column.
  3. In the row where the cluster you want to view is located, click the cluster name in the Name column to switch to the Cluster Details page. You can view the enterprise project associated with the cluster.
  4. Click the enterprise project name to view and edit it on the Enterprise Management console.

    When querying the resource list of a specified project on the Enterprise Management console, you can also query the CS resources.

Searching for Jobs by Enterprise Project

You can search for all jobs associated with the project by enterprise project.

  1. Log in to the CS management console. Click Job Management. On the displayed page, select Enterprise project from the second drop-down list box in the upper right corner of the cluster list.
  2. Enter the name of the target enterprise project in the search text box to view all jobs associated with the enterprise project.

Searching for Clusters by Enterprise Project

You can search for all clusters associated with the project by enterprise project.

  1. Log in to the CS management console. Click Cluster Management. On the displayed page, select Enterprise project from the second drop-down list box in the upper right corner of the cluster list.
  2. Enter the name of the target enterprise project in the search text box to view all clusters associated with the enterprise project.

Migrating a Job or Cluster to or out of an Enterprise Project

Each CS job or cluster can only be associated with a single enterprise project. After a job or cluster is created, you can migrate it from its current enterprise project to another one on the Enterprise Management console, or migrate the job or cluster from another enterprise project to a specified enterprise project. After the migration, the job or cluster is associated with the new enterprise project. The association between the job or cluster and the original enterprise project is automatically released. For details, see Enterprise Project Management > Managing Resources in the Enterprise Management User Guide.

Enterprise Project-Level Authorization

If the permissions preset in the system do not meet your requirements, you can create custom policies and apply these policies to user groups for refined access control. As an independent managed object, the enterprise project can be bound to a user group, and the custom policy can be applied to the user group. This allows for more refined access control at the enterprise project level.

  1. Log in to the IAM management console. On the Policies page, create a custom policy based on the preset policy template (such as CS Admin and CS Viewer).
  2. Log in to the Enterprise Management console, add the user group to the project on the user group management page, bind the custom policy with the user group, and add users to the user group.

    For details, see Managing User Groups in the Enterprise Management User Guide.

When creating a custom policy, you can add IAM actions corresponding to CS operations shown in Table 1 to the action list of the policy statement so that the policy can obtain the CS operation permissions. For example, if cs:jobs:create is added to the action list of a custom policy statement, the policy has the permission to create jobs.

Table 1 Fine-grained permissions of CS

CS Operation

IAM Action

Obtaining details about a job

cs:jobs:get

Obtaining the job list

cs:jobs:list

Creating a job

cs:jobs:create

Updating a job

cs:jobs:update

Deleting a job

cs:jobs:delete

Starting a job

cs:jobs:start

Stopping a job

cs:jobs:stop

Obtaining details about a cluster

cs:clusters:get

Obtaining the cluster list

cs:clusters:list

Creating a cluster

cs:clusters:create

Updating a cluster

cs:clusters:update

Stopping a cluster

cs:clusters:stop

Restarting a cluster

cs:clusters:restart

Deleting a cluster

cs:clusters:delete

Querying quota information about a user

cs:clusterQuota:get

Querying quota information about all users

cs:clusterQuota:list

Changing the quota of a user

cs:clusterQuota:modify

Obtaining audit statistics

cs:auditLog:get

Obtaining template information

cs:template:get

Obtaining the template list

cs:template:list

Creating a template

cs:template:create

Updating a template

cs:template:update

Deleting a template

cs:template:delete