Setting Quotas for Embotics® vCommander® Multi-tenancy

Quotas allow you to limit the compute resources granted to an organization so that you can assign available resources to your consumer groups based on their business requirements.

What types of quotas can I set?

You can configure the following types of quotas:

resource-based quotas, which allow you to limit the number of vCPUs, the amount of RAM and the amount of storage. You can set both global and per-tier storage quota.

cost-based quotas, which allow you to limit the total daily cost of VMs

How do quotas work?

You set quotas for each organization. All VMs assigned to an organization count against an organization's quota. You can also optionally set quotas for each member of an organization. All VMs owned by an organization member (meaning that the organization member is primary owner) count against a member's quota. Member quotas allow you to set limits based on users' individual needs.

NotePencil-smallYou cannot assign member quota to a directory services group. Member quotas can only be assigned to individual users (either local or directory services users).

Configuring individual member quota is optional. The default value of "Max Quota" for organization members means that all resources are available to any member until the maximum quota for the organization is reached. Note that you must set the same type of quota for both the organization and its members (for example, if you set a cost-based quota for the organization, you must set cost-based quotas for its members).

Once you assign quotas, you can use them to determine whether a service request (both new services and change requests) can be approved. For example, you may want any service request that exceeds an organization's quota to be rejected automatically. Or, you may want a second level of approval for requests that will exceed quota. To set up an approval process, you configure an approval workflow for new service requests and service change requests.

To configure quotas, you must use organizations. However, if you do not want to configure multiple organizations, you can simply add all of your users to the Default organization. See Creating Organizations for Embotics® vCommander® Multi-tenancy.

Quota usage is based on VM ownership, not on cost allocation.

Media Library quota

When quota is configured for an organization, media files in an organization's media folder can be included in quota calculations. When media files are included in quota calculations, if an upload would exceed an organization's quota, the Service Portal user is prevented from uploading a file. vCommander users, by contrast, are not prevented from uploading files in this situation, but files uploaded to an organization's media folder by vCommander users do count towards the organization's quota.

Note that media folders assigned to multiple organizations consume quota from all assigned organizations.

Both resource quota and cost quota are supported for media files. In the case of a cost quota, costs are determined by the cost model assigned to the datacenter where the datastore is located.

Global media folders are never included in quota calculations. Member quotas are not affected by media files.

To include media files in quota calculations, make sure that the storage tier assigned to the datastore where the media files are located is included in the organization's quota. If you want Service Portal users to see their media quota separately in the Service Portal dashboard, put the media files on a separate storage tier and name the tier Media, for example.

To exclude media files from quota calculations, assign a specific storage tier to the datastore where the media files are located. Then, exclude this storage tier from the organization's quota.

See Creating a Media Library to learn how to set up a media library.

Note for AWS

Load balancers, databases and stacks are not included in resource quota calculations. Resource quota-based service request approval workflows do not work for CloudFormation services. However, because VMs are included in quota calculations, once a stack is deployed, any VMs in the stack may cause quota to be exceeded. Cost quotas are fully supported for AWS services.

Reserved quota

Service requests are also included in quota usage calculations. In other words, quota is reserved for a member once a service request is submitted. Quota reservation ensures that quota calculations are accurate in situations where the approval or provisioning process may take a long time.

For example, if the organization Development has 2 CPUs remaining in its quota, and Brian has submitted a service change request to increase the CPU count for one of his VMs from 2 to 4, once his request is submitted, 2 CPUs are reserved for him, and the organization's quota has been reached. If Doug, another member of the Development organization, requests a VM with 2 CPUs, his request will exceed the organization's quota. Depending on the organization's approval process, Doug's request may be rejected or may need an additional level of approval. If Brian's request is later rejected, the reserved quota is released, at which point Doug's request will no longer exceed the organization's quota.

NotePencil-smallIf a primary owner is specified on the request form, quota is reserved for the primary owner, not for the requester.
Per-tier storage quota

Your storage capacity is likely divided into a few tiers with varying capabilities and cost. vCommander allows you considerable flexibility in configuring quota for each storage tier, at the organization level and the member level. You can set an overall storage limit, storage tier limits, or both, for both organizations and members. You can set per-tier storage quota limits even if you do not set an overall storage quota for the organization or member.

NotePencil-smallYou must ensure that datastores are available to back all storage tiers in use.

For example, if you use one storage tier for swap space, you can exclude this tier from storage quota calculations, while setting per-tier quota limits for your other storage tiers.

You can control whether media files count towards an organization's quota through storage tiers.

When a storage tier is included in quota but set to Unlimited, the storage tier is displayed on the Service Portal dashboard, but usage does not count towards a user's or organization's quota. When a storage tier is excluded, it is not displayed on the Service Portal dashboard, and usage does not count towards a user's or organization's quota.

You can allow users to request a specific storage tier by adding the Storage element to the request form and enabling the Display Storage Tier option for this element. When the Storage Tier element is not selectable by requesters, the storage tier of the source disk is used for quota calculations.

When you configure per-tier storage quota, Storage Tiers are displayed in the Quota widget on the Service Portal Dashboard.

portal-storage-tiers

Users can click the green areas of each graph to see which VMs are consuming resources. For example, clicking the green bar in the SSD graph shown above displays a list of VMs consuming SSD storage. These properties reflect total provisioned storage, rather than actual (used) storage. Service Portal users and vCommander users can also:

add the Tier Usage properties to the Details pane on the VM's Summary tab to see the tier usage for an individual VM

add the Tier Usage columns to the table of VMs in the Virtual Machines tab to see tier usage for a list of VMs

What do users see when quota is configured?

When quota is configured for an organization, quota information is included in all service request emails related to the organization, and a Quota tab appears on the Request Details dialog for requests made by organization members. Note that the Quota tab is shown only until the request is approved.

quota-req-details
NotePencil-smallIf a primary owner was specified on the request form, the primary owner's quota usage is displayed, rather than the requester's.

Organization members can monitor their quota usage on the Service Portal Dashboard. When quota has been exceeded, organization members see warnings at the top of the Dashboard. Members also see a warning when submitting a service request that will exceed their available quota.

Administrators see a warning icon in the Organizations list when quota has been exceeded; selecting the organization allows you to view details.

org-quota-exceeded

Example: Configuring quota for an organization

As an example, let's say you want to limit the resources for an organization to 20 CPUs, 80 GB of memory and 200 GB of storage. If your organization currently has four members, you can:

set identical quotas for each member (each member is limited to 5 CPUs, 20 GB of memory and 50 GB of storage)

set individual quotas for each member (one member is allowed up to 8 CPUs, and the other 3 are limited to 4 CPUs each)

allow each member to have up to the maximum available quota for the organization, by not setting member quotas (if two members have used up all 20 CPUs, the others will have no available quota)

Setting a resource quota for an organization

Access through:

Configuration menu > Organizations and Quotas > Organizations tab

Available to:

vCommander Role of Superuser and Enterprise Administrator

NotePencil-smallQuotas can only be set for organizations. To learn how to set up organizations, see Creating Organizations for Embotics® vCommander® Multi-tenancy. To set a cost quota, see Setting a Cost Quota for an Organization below.

To set a resource quota for an existing organization:

1.On the Organizations tab, select the organization and click Edit.

2.Click Next to advance to the Organization Quotas page of the wizard.

3.Select Resource Quota from the drop-down menu and enter values for CPUs, Memory and Storage as required.

The organization's current resource usage (based on all services currently assigned to the organization) is displayed to guide you in setting resource limits.

4.To assign per-tier storage quota, enable Use Per Storage Tier Quotas.

A Storage Tiers tab appears next to the Resources tab.

Enter quota limits for storage tiers as required.

You can set an overall storage limit for an organization, storage tier limits, or both. You can set per-tier storage quota limits even if you do not set an overall storage quota on the Resources tab. You can also exclude certain tiers from storage quota calculations (for example, if you use one tier for swap space).

When a storage tier is included in quota but set to Unlimited, the storage tier is displayed on the Service Portal dashboard, but usage does not count towards a user's or organization's quota. When a storage tier is excluded, it is not displayed on the Service Portal dashboard, and usage does not count towards a user's or organization's quota.

NotePencil-smallOnce you enable Use Per Storage Tier Quotas for the organization, Service Portal organization managers will see a Storage Tiers tab in the Edit Quota dialog.

5.Click Advanced Configuration.

6.To exclude powered-off VMs from CPU and memory quota calculations, enable the option For stopped VMs, include only storage quota and exclude CPU and memory quota.

7.By default, if this option is enabled, members cannot power on VMs when doing so would cause quota to be exceeded. To change this behavior, enable the option Allow organization members to power on VMs when quota is exceeded. In this case, members are warned that quota will be exceeded, but they can proceed with powering on the VM.

8.By default, quota usage for thin disks is calculated as actual (used) storage, rather than total provisioned size. To change this setting, enable Use total provisioned disk size for thin disks. Note that this setting affects both overall and per-tier storage quota.

If the organization is over quota, warning messages are displayed.

NotePencil-smallYou can leave the organization's quota as Unlimited and still set member quotas on the next page of the wizard.

9.To set quotas for individual organization members, click Next. Otherwise, click Finish.

10.On the Member Quotas page, you can set quotas for organization members. Configuring individual member quota is optional. The default value of Max Quota indicates that all resources are available to any member until the maximum quota for the organization is reached.

NotePencil-smallYou cannot assign member quota to a directory services group. Member quotas can only be assigned to individual users (either local or directory services users).

11.Select one or more members and click Edit User Quota.

12.Enter values for CPUs, Memory and Storage as required.

If you're editing quota for a single user, hovering over the question mark help-16x16 or warning icon warning-16x16 displays the member's current usage (based on all services currently assigned to the member).

13.Click Balance CPU, Balance Memory or Balance Storage to balance the available quota among all organization members. Balancing the storage affects both overall and per-tier storage quota.

NotePencil-smallWhen members are added to the organization, they automatically have Max Quota. If you balanced the quota prior to adding more members, you must balance the quota again. Likewise, you must rebalance the quota if you remove members.

14.To remove a value and specify that the user has Max Quota, clear the value in the field and click OK.

15.If you enabled Use Per Storage Tier Quotas on the Organization Quotas page, a Storage Tiers tab appears in the Edit Quota dialog for members.

Enter quota limits for storage tiers as required.

You can set an overall storage limit for a user, storage tier limits, or both. As with organizational quota, you can set per-tier storage quota limits for a member even if you do not set an overall storage quota for that member on the Resources tab.

16.Click OK and Finish.

NotePencil-smallQuota details are displayed when you select the organization on the Organizations tab.

Setting a cost quota for an organization

Access through:

Configuration menu > Organizations and Quotas > Organizations tab

Available to:

vCommander Role of Superuser and Enterprise Administrator

NotePencil-smallQuotas can only be set for organizations. To learn how to set up organizations, see Creating Organizations for Embotics® vCommander® Multi-tenancy. To set a resource quota, see Setting a Resource Quota for an Organization above.

To set a total daily cost quota for an existing organization:

1.On the Organizations tab, select the organization and click Edit.

2.Click Next to advance to the Organization Quotas page of the wizard.

3.Select Cost Quota from the drop-down menu and enter a maximum daily cost.

Current daily cost for the organization is displayed once you have entered a value (based on all services currently assigned to the organization).

4.Click Advanced Configuration.

By default, members cannot power on VMs when doing so would cause quota to be exceeded. To change this behavior, enable the option Allow organization members to power on VMs when quota is exceeded. In this case, members are warned that quota will be exceeded, but they can proceed with powering on the VM.

If the organization is over quota, warning messages are displayed.

NotePencil-smallYou can leave the organization's quota as Unlimited and still set member quotas on the next page of the wizard.

5.To set quotas for individual organization members, click Next. Otherwise, click Finish.

6.Optionally, on the Member Quotas page, set quotas for organization members. Configuring individual member quota is optional. The default value of Max Quota indicates that all resources are available to any member until the maximum quota for the organization is reached.

NotePencil-smallYou cannot assign member quota to a directory services group. Member quotas can only be assigned to individual users (either local or directory services users).

7.Select a member and click Edit User Quota.

8.Enter a maximum daily cost. Current daily cost is displayed (based on all services currently assigned to the organization).

9.Click Balance Cost to balance the available quota among all organization members.

NotePencil-smallWhen members are added to the organization, they automatically have Max Quota. If you balanced the quota prior to adding more members, you must balance the quota again. Likewise, you must rebalance the quota if you remove members.

10.To remove a value and specify that the user has Max Quota, clear the value in the field and click OK.

11.Click Finish.

NotePencil-smallQuota details are displayed when you select the organization on the Organizations tab.

What's next?

Set up a quota-based approval process.