11.8. Managing Power Panel Policies¶

11.8.1. Managing Policies¶

On the Policies screen, you can manage the policies currently existing in Virtuozzo Automator on three levels: the global level, the physical server level, and the virtual environment level. You can perform the following operations on each level:

11.8.2. Performing Main Operation on Policies¶

The Power Panel Policies screen accessible by clicking Setup > Power Panel Policies on the VA menu allows you to manage your policies in the following way:

• view all Power Panel policies currently existing in Virtuozzo Automator in the table,

• create a new policy by following the New Policy link above the table,

• configure the policy parameters by clicking the name of the corresponding policy in the table,

• remove the policies that you do not need any more by selecting the check boxes next to the corresponding policies in the table and clicking the Delete button.

11.8.3. Creating New Policy¶

A policy restricts user access to certain Power Panel functionality and/or set limitations on performing certain operations on the corresponding virtual environment(s) or physical server(s). The New Policy screen can be accessed by clicking New Policy on the Power Panel Policies screen.

To make a new policy, you should perform the following operations:

1. In the General Settings section, specify a policy name in the Name field. You can also provide brief description for the policy in the Description field.

2. In the Power Panel Policy Rules section, choose the restriction rules that will comprise the policy. The following rules can be selected:

   Rule Name	Description
   Backups Management	Deny access to the backup management functionality in Virtuozzo Power Panel. In this case, the user will not be able to create and restore virtual environment backups.
   Backup Total Count	Having enabled the Backups Management functionality, you can set a limit on the number of backups the user is allowed to create for their virtual environment. With the Unlimited option, there is no limitation for backup creation. With the Limited option, specify the maximum number of allowed backups in the Total field. Note At least one backup should be allowed.
   Backup Total Size	Set a limit on the maximal size of all created backups for a particular virtual environment. If you select this rule, you will need to specify the desired size in the Total field.
   Packages Management	Prohibit the user from managing rpm and deb packages in the virtual environment context using Virtuozzo Power Panel.
   Files Management	Prohibit the user from managing the virtual environment files using Virtuozzo Power Panel.
   Applications Management	Prohibit the user from managing applications in the virtual environment context using Virtuozzo Power Panel.
   Control Panel Management	Prohibit the user from managing the Plesk control panel from Virtuozzo Power Panel. With this restriction turned on, the Control Panels menu item is removed from the Virtuozzo Power Panel. Note This rule can be applied to containers only

3. Click the Save button.

After a while, the newly created policy will be displayed in the table on the Power Panel Policies screen.

To apply any of the policies to a certain virtual environment or physical server, go to the corresponding object and click Manage > Power Panel Policies on its toolbar. You can manage policies on the global level by following the Manage Infrastructure > Global Policies link on the Infrastructure toolbar. On the Policies screen, you will see if any policies have already been applied to this objects and you will be able to apply new policies.

11.8.4. Configuring Policy Parameters¶

The Configure Policy screen allows you to configure the parameters of any policies existing in Virtuozzo Automator. To display this screen, click the name of the policy you wish to edit in the table on the Power Panel Policies screen.

You can configure the policy parameters as follows:

• In the General Settings section, you can

  • modify the name currently assigned to the policy in the Name field;

  • change the policy description in the Description field.

• In the Power Panel Policy Rules section, you can

  • add new restrictions rules to the policy by selecting the check boxes next to the corresponding rules;

  • remove any of the restriction rules currently included in the policy by clearing the check box next to the corresponding rules.

When you are ready, click the Save button to save the changes made.

11.8.5. Managing Policy Assignments¶

The Manage Assignment screen allows you to assign new policies to your virtual environments and remove those policies that you do not need any more. This screen is displayed on clicking the Manage Assignment link on the Policies screen.

The Available Policies table displays all the policies that currently exist in Virtuozzo Automator and are not yet assigned to your virtual environments. Depending on the level where a policy will be applied, it will have effect on:

• all virtual environments that reside on physical servers registered in Virtuozzo Automator (the global level);

• all virtual environments that reside on a particular physical server (the physical server level);

• a particular virtual environment (the virtual environment level).

To assign a new policy:

1. Select the check box next to its name and click the >> button. The policy will appear in the Assigned Policies table.

2. In the drop-down list box under the policy name, select:

   • Allow to override on sublevels if you wish to allow policies set on lower levels redefine those assigned on higher levels. If this option is enabled (the default behavior):

     • the policies set on the physical server and virtual environment levels will be able to redefine those assigned on the global level,

     • the policies set on the virtual environment level will be able to redefine those assigned on the physical server level.

   • Force on all sublevels if you wish to forbid redefining policies set on higher levels by those assigned on lower levels.

3. Click the Save button.

After a while, the policy name will appear in the Assigned Policies table on the Policies screen.

The Assigned Policies table on the Manage Assignment screen lists those policies that are currently assigned to your virtual environments. To remove a policy:

1. Select the check box next to its name and click the << button. The policy will be moved to the Assigned Policies table.

2. Click the Save button.