Sub-Account

Sub-account is a new concept introduced by ZStack Cloud for resource control, which is used to define and isolate resource owners.

Each sub-account can use, modify, share, and revoke its own resources, as well as use resources shared with it by other sub-accounts (Specifically, "use" stands for operations such as creating a VM instance or creating a volume). Sub-account is created and managed by the admin, is given the permission to manage the virtual resources it creates.

After installing ZStack Cloud, you need to log in to the Cloud through the admin to add and configure key resources following the wizard. Then you can create sub-accounts. By default, a sub-account has no access to key resources created by the admin, such as instance offerings, disk offerings, hosts, images, and networks. For the sub-account to create a VM instance, the admin needs to share with it the necessary resources including instance offerings and networks. A sub-account has the permissions to create, delete, and manage VM instances, images, volumes, security groups, user groups, and users.