Domain-partitioned authorization method for cloud computing resources

Abstract

The embodiment of the invention discloses a domain-partitioned authorization method for cloud computing resources. The domain-partitioned authorization method for cloud computing resources comprises the steps of: setting the basic information of an operator; setting the authority role information of the operator; generating a resource-service authorization tree, wherein the resource-service authorization tree comprises the following resources: one or more than two business domains, and the businesses and the clusters included by the business domains; loading the resource-service authorization tree to a user interface; determining the resources chosen by a user to be the operable resources of the operator from the resource-service authorization tree; and storing the basic information of the operator, the authority role information of the operator and the operable resources of the operator in an operator table, an operator authority role table and an operator resource relationship table respectively. By the technical scheme provided by the invention, the demand of rapidly opening basic facility resource management authorities in batch of a manager aiming at one operator is met.

Description

technical field [0001] The invention relates to the field of cloud computing, in particular to a method for domain-specific authorization of cloud computing resources. Background technique [0002] Consumers can obtain services from a well-established computer infrastructure through the Internet. This type of service is called Infrastructure as a Service (IaaS, Infrastructure as a Service). IaaS is a manifestation of cloud computing, which provides computing, network, storage and other information system infrastructure as services. Compared with the traditional information technology resource usage model, the cloud computing model has the advantages of on-demand use, elastic scaling, dynamic migration and rapid deployment, so it has become one of the development priorities of telecom operators in recent years. [0003] At present, commercial infrastructure management platforms are equipped with different levels of authority management systems. However, the existing authori...

AI Technical Summary

Problems solved by technology

[0003] At present, commercial infrastructure management platforms are equipped with different levels of authority management systems. However, the existing authority management systems can only classify infrastructure resources of the same attribute. For example, although Vcenter of Vmware has strong virtual and physical Resource authorization function, but users with different permissions need to be set for each infrastructure resource (such as: virtualization center, cluster, host and virtual machine)

It can be seen that the existing authority management system cannot meet the needs of an operator to quickly activate the infrastructure resource management authority in batches in the carrier-level cloud resource management system.

Images