Sharing Server Access via VPC
Overview
When you create a VPC, you are made the owner of that VPC. This gives you full control of the VPC.
The CloudAfrica platform allows you to share access to a VPC and in turn, to any server linked to that VPC.
You can allow other people the view/access the server details (Member Role), or you may allow them to manage the entire VPC, access to that VPC, and servers linked to that VPC. (Admin Role)
The two available role levels for VPC members are:
- Admin - can add and delete servers, edit and potentially even delete the VPC.
- Member - can start and stop servers inside the VPC, but not remove, edit or add any services.
Granting Access
First ensure that the Server exists, and is linked to the VPC you are intending to share.
Steps to add a new member to your VPC:
- Login to our CloudAfrica website at https://app.cloudafrica.net/#/
- Click on VPC in the left navigation bar
- Select your VPC from the available list
- Click “+ Share With” on the right-hand side
- Type in the email address of the person with whom you want to share access.
This email address must already belong to a registered member on the CloudAfrica website.- The user will have to register first if they do not yet have a CloudAfrica account.
- Assign the Role as Admin or Member
- Click "Add" to finalise sharing.
- Once completed the new VPC member will be able to log into their account as normal and access (or control - depending on their member roles) all the servers linked to the same VPC.
Removing Access
Steps to remove a member from a VPC:
- Login to our CloudAfrica website at https://app.cloudafrica.net/#/
- Click on VPC in the side navigation bar
- Select your VPC from the available list
- On the right of the member click the trash can icon
- Confirm that you want to delete this member from the VPC by selecting
Access Levels granted within the website when Sharing a VPC to members.
- In all instances, it is assumed that the server has been shared with a registered user before the permission takes effect
- This table does NOT refer to console-level access.
| Permission | Description | Owner | Admin | Member |
|---|---|---|---|---|
| Share Private server from VPC View | This user can also share it with other registered users | X | X | - |
| Delete self from VPC | No user can delete their own access
| - | - | - |
| Delete admin users from VPC (not self) | User can delete other Admin users from the VPC. | X | X | - |
| Delete Member user from VPC (not self) | User can delete other Member users from the VPC. | X | X | - |
| Share to admin user in VPC | User can share Admin privileges for the VPC with other registered users. This will grant Admin access to any Servers linked to the same VPC. | X | X | - |
| Share to member user in VPC | User can share Member privileges for the VPC with other registered users. This will grant the Member access to any Servers linked to the same VPC. | X | X | - |
| Delete VPC linked to Group Account (Credit card) | User can delete the entire VPC. This removes all shared permissions set up previously. All registered Admin and Member VPC users will lose access to servers linked to the VPC being deleted! | X | X | - |
| Edit VPC linked to Group Account | User can Edit the details related to the VPC, such as the name and description. | X | X | - |
| Create Server linked to Shared VPC | Once access has been granted to a VPC, these users can create servers linked to that same VPC. The Account that pays for the VPC will be used by default to pay for the newly created Servers. | X | X | - |
| Delete Server linked to Shared VPC | Once access has been granted to a VPC, these users can delete servers linked to that same VPC. | X | X | - |
| Create Firewall Rule on Shared Server | Create firewall rules - even though a VPC is typically linked to a Privately accessible Server, adding Firewall rules will also make it publicly accessible. | X | X | - |
| Edit Firewall Rule on Shared Server | Edit all firewall rules | X | X | - |
| Delete Firewall Rule on Shared Server | Delete firewall rules - Deleting the rules will not remove the public IP Address | X | X | - |
| Reboot Shared Server | Reboot the shared server | X | X | X |
| Shutdown Shared Server | Stop the shared server | X | X | X |
| Start Shared Server | Start / Restart the shared server | X | X | X |
Use Console to access server | Users can see the Console window, and perform various activities on the server via the console window | X | X | X |
| Rename Server | Renaming the server will automatically reboot the server | X | X | - |
| Edit billing details linked to Shared VPC | Only the owner can view and edit the bank details associated with the payment of the VPC. These bank details will be used to pay for the networking costs associated with the VPC, These bank details will also automatically be used for any servers created, and which are linked to the same VPC. | X | - | - |
| View Server on the dashboard - on the Servers page | Depending on the role, each user will see the servers shared with them on the Server dashboard. The individual's role/access level will be visible when hovering over the "Share" icon | X | X | X |