Managing your account

Contributors netapp-bcammett netapp-tonacki Download PDF of this page

After you perform initial setup, you can administer your account settings later by managing users, service accounts, workspaces, Connectors, and subscriptions.

Managing your account with the Tenancy API

If you want to manage your account settings by sending API requests, then you’ll need to use the Tenancy API. This API is different than the Cloud Manager API, which you use to create and manage working environments.

Creating and managing users

The user’s in your account can access the manage the resources in your account’s workspaces.

Adding users

Associate Cloud Central users with the Cloud Central account so those users can create and manage working environments in Cloud Manager.

Steps
  1. If the user hasn’t already done so, ask the user to go to NetApp Cloud Central and sign up.

  2. From the top of Cloud Manager, click the Account drop-down.

    A screenshot that shows the Account Settings option in the top banner of Cloud Manager.

  3. Click Manage Account next to the currently selected account.

    A screenshot that shows the Manage Account Settings option that’s available from the Account drop-down.

  4. From the Users tab, click Associate User.

  5. Enter the user’s email address and select a role for the user:

    • Account Admin: Can perform any action in Cloud Manager.

    • Workspace Admin: Can create and manage resources in assigned workspaces.

    • Compliance Viewer: Can only view compliance information and generate reports for workspaces that they have permission to access.

    • SnapCenter Admin: Can use the SnapCenter Service to create application consistent backups and restore data using those backups. This service is currently in Beta.

  6. If you selected Workspace Admin or Compliance Viewer, select one or more workspaces to associate with that user.

    A screenshot that shows how to associate a user by selecting a role and the associated workspaces.

  7. Click Associate User.

Result

The user should receive an email from NetApp Cloud Central titled "Account Association." The email includes the information needed to access Cloud Manager.

Removing users

Disassociating a user makes it so they can no longer access the resources in a Cloud Central account.

Steps
  1. From the top of Cloud Manager, click the Account drop-down and click Manage Account.

    A screenshot that shows the Manage Account Settings option that’s available from the Account drop-down.

  2. From the Users tab, click the action menu in the row that corresponds to the user.

    A screenshot that shows the action menu that is available when hovering over a user’s name in the Users table.

  3. Click Disassociate User and click Disassociate to confirm.

Result

The user can no longer access the resources in this Cloud Central account.

Managing a Workspace Admin’s workspaces

You can associate and disassociate Workspace Admins with workspaces at any time. Associating the user enables them to create and view the working environments in that workspace.

Steps
  1. From the top of Cloud Manager, click the Account drop-down and click Manage Account.

    A screenshot that shows the Manage Account Settings option that’s available from the Account drop-down.

  2. From the Users tab, click the action menu in the row that corresponds to the user.

    A screenshot that shows the action menu that is available when hovering over a user’s name in the Users table.

  3. Click Manage Workspaces.

  4. Select the workspaces to associate with the user and click Apply.

Result

The user can now access those workspaces from Cloud Manager, as long as the Connector was also associated with the workspaces.

Creating and managing service accounts

A service account acts as a "user" that can make authorized API calls to Cloud Manager for automation purposes. This makes it easier to manage automation because you don’t need to build automation scripts based on a real person’s user account who can leave the company at any time. And if you’re using federation, you can create a token without generating a refresh token from the cloud.

You give permissions to a service account by assigning it a role, just like any other Cloud Manager user. You can also associate the service account with specific workspaces in order to control the working environments (resources) that the service can access.

When you create the service account, Cloud Manager enables you to copy or download a client ID and client secret for the service account. This key pair is used for authentication with Cloud Manager.

Creating a service account

Create as many service accounts as you need to manage the resources in your working environments.

Steps
  1. From the top of Cloud Manager, click the Account drop-down.

    A screenshot that shows the Account Settings option in the top banner of Cloud Manager.

  2. Click Manage Account next to the currently selected account.

    A screenshot that shows the Manage Account Settings option that’s available from the Account drop-down.

  3. From the Users tab, click Create Service Account.

  4. Enter a name and select a role. If you chose a role other than Account Admin, choose the workspace to associate with this service account.

  5. Click Create.

  6. Copy or download the client ID and client secret.

    The client secret is visible only once and is not stored anywhere by Cloud Manager. Copy or download the secret and store it safely.

  7. Click Close.

Obtaining a bearer token for a service account

In order to make API calls to the Tenancy API, you’ll need to obtain a bearer token for a service account.

curl --location --request POST 'https://netapp-cloud-account.auth0.com/oauth/token' \
--header 'Content-Type: application/json' \
--data-raw '{
    "grant_type": "client_credentials",
    "client_secret": "<client secret>",
    "audience": "https://api.cloud.netapp.com",
    "client_id": "<client id>"
}'

Copying the client ID

You can copy a service account’s client ID at any time.

Steps
  1. From the Users tab, click the action menu in the row that corresponds to the service account.

    A screenshot that shows the action menu that is available when hovering over a user’s name in the Users table.

  2. Click Client ID.

  3. The ID is copied to your clipboard.

Recreating keys

Recreating the key will delete the existing key for this service account and then create a new key. You won’t be able to use the previous key.

Steps
  1. From the Users tab, click the action menu in the row that corresponds to the service account.

    A screenshot that shows the action menu that is available when hovering over a user’s name in the Users table.

  2. Click Recreate Key.

  3. Click Recreate to confirm.

  4. Copy or download the client ID and client secret.

    The client secret is visible only once and is not stored anywhere by Cloud Manager. Copy or download the secret and store it safely.

  5. Click Close.

Deleting a service account

Delete a service account if you no longer need to use it.

Steps
  1. From the Users tab, click the action menu in the row that corresponds to the service account.

    A screenshot that shows the action menu that is available when hovering over a user’s name in the Users table.

  2. Click Delete.

  3. Click Delete again to confirm.

Managing workspaces

Manage your workspaces by creating, renaming, and deleting them. Note that you can’t delete a workspace if it contains any resources. It must be empty.

Steps
  1. From the top of Cloud Manager, click the Account drop-down and click Manage Account.

  2. Click Workspaces.

  3. Choose one of the following options:

    • Click Add New Workspace to create a new workspace.

    • Click Rename to rename the workspace.

    • Click Delete to delete the workspace.

Managing a Connector’s workspaces

You need to associate the Connector with workspaces so Workspace Admins can access those workspaces from Cloud Manager.

If you only have Account Admins, then associating the Connector with workspaces isn’t required. Account Admins have the ability to access all workspaces in Cloud Manager by default.

Steps
  1. From the top of Cloud Manager, click the Account drop-down and click Manage Account.

  2. Click Connector.

  3. Click Manage Workspaces for the Connector that you want to associate.

  4. Select the workspaces to associate with the Connector and click Apply.

Managing subscriptions

After you subscribe from a cloud provider’s marketplace, each subscription is available from the Account Settings widget. You have the option to rename a subscription and to disassociate the subscription from one or more accounts.

For example, let’s say that you have two accounts and each is billed through separate subscriptions. You might disassociate a subscription from one of the accounts so the users in that account don’t accidentally choose the wrong subscription when creating a Cloud Volume ONTAP working environment.

Steps
  1. From the top of Cloud Manager, click the Account drop-down and click Manage Account.

  2. Click Subscriptions.

    You’ll only see the subscriptions that are associated with the account that you’re currently viewing.

  3. Click the action menu in the row that corresponds to the subscription that you want to manage.

    A screenshot of the action menu for a subscription.

  4. Choose to rename the subscription or to manage the accounts that are associated with the subscription.

Auditing user activity in your account

The Timeline in Cloud Manager shows the actions that users completed to manage your account. This includes management actions such as associating users, creating workspaces, creating Connectors, and more. Checking the Timeline can be helpful if you need to identify who performed a specific action, or if you need to identify the status of an action.

Steps
  1. Click All Services > Timeline.

  2. Under the Filters, click Service, enable Tenancy, and click Apply.

Result

The Timeline updates to show you account management actions.

Changing your account name

Change you account name at any time to change it to something meaningful for you.

Steps
  1. From the top of Cloud Manager, click the Account drop-down and click Manage Account.

  2. In the Overview tab, click the edit icon next to the account name.

  3. Type a new account name and click Save.

Allowing private previews

Allow private previews in your account to get access to new NetApp cloud services that are made available as a preview in Cloud Manager.

Services in private preview are not guaranteed to behave as expected and might sustain outages and be missing functionality.

Steps
  1. From the top of Cloud Manager, click the Account drop-down and click Manage Account.

  2. In the Overview tab, enable the Allow Private Preview setting.

Allowing third-party services

Allow third-party services in your account to get access to third-party services that are available in Cloud Manager. Third-party services are cloud services similar to the services that NetApp offers, but they’re managed and supported by third-party companies.

Steps
  1. From the top of Cloud Manager, click the Account drop-down and click Manage Account.

  2. In the Overview tab, enable the Allow Third Party Services setting.

Disabling the SaaS platform

We don’t recommend disabling the SaaS platform unless you need to in order to comply with your company’s security policies. Disabling the SaaS platform limits your ability to use NetApp’s integrated cloud services.

The following services aren’t available from Cloud Manager if you disable the SaaS platform:

  • Cloud Data Sense

  • Kubernetes

  • Cloud Tiering

  • Global File Cache

If you do disable the SaaS platform, you’ll need to perform all tasks from the local user interface that is available on a Connector.

This is an irreversible action that will prevent you from using the Cloud Manager SaaS platform. You’ll need to perform actions from the local Connector. You won’t have the ability to use many of NetApp’s integrated cloud services, and re-enabling the SaaS platform will require the help of NetApp support.
Steps
  1. From the top of Cloud Manager, click the Account drop-down and click Manage Account.

  2. In the Overview tab, toggle the option to disable use of the SaaS platform.