The account models in this section show use cases for directories as structuring elements for your subaccounts.
If, in your global account, you cannot create directories, it means that your global account has not been migrated to feature set B yet. See Cloud Management Tools — Feature Set Overview
Apart from structuring your global account into several subaccounts, you can group individual subaccounts into directories to manage, operate, and analyze such groups of subaccounts together. One global account can contain up to five levels of directories, which can contain n subaccounts each.
Here are a few example use cases where directories help you manage your subaccounts:
-
Administrative reasons: Structure your global account according to the responsibilities within your organization. For example, give each subsidiary, department, or LOB their own directory.
-
Billing purposes: Structure your global account into directories for accounting purposes.
-
Geographical separation: Group subaccounts based on geographical locations to manage different local regulations or to improve network performance for groups that are located together.
-
Business scenario: Group subaccounts that belong to the same business scenario or according to other business needs. This gives you the option to control each business solution separately.
-
Resource limitations: Use the directory structure to control access to resources, limit usage by generating separate usage and cost reports, or define usage limitations, to give more resources to critical directories, or to enable different monitoring per directory. Or you could structure the subaccounts according to usage limits in different landscapes.
-
Technical reasons: Structure directories and subaccounts according to technical limitation and then add labels for virtual grouping or vice versa.
Directories and subaccounts can be tagged with labels for easy organizing and filtering. Also, labels can be attached to other entities in your global account, such as service instances. Think of labels as a way of virtually grouping subaccounts or directories that belong together or for which you want to create reportings.
Here are some examples of simple labels:
-
Landscape: Dev, Test, Prod
-
Department: HR, IT, Finance, Sales
-
Cost Center: 000001234, 000001235
-
Flagged for deletion
-
Important
Directories and labels offer two different ways of structuring subaccounts into groups. We recommend to use directories as the primary structuring mechanism and to use labels to build virtual groups of subaccounts or directories for which you need to create reports.
The below-mentioned account models for feature set B work for all runtimes. Inside a subaccount, you can further structure your projects depending on the runtime, for example by creating Cloud Foundry spaces or Kyma namespaces.
Related Information
This account model uses a separate directory for each functional area.
Within each of those directories, three subaccounts (for development, test, and production) are created. For each directory, the functional area can use their own identity provider and manage their entitlements. Additionally, you can make use of labels, for example for the person responsible, cost center, or other aspects that you need for reportings later on.
To ensure that there are no conflicts with special characters, we recommend to stick with lower-case letters and hyphens, and not to use spaces in names. This way, you can name a subaccount, its subdomain, and its Cloud Foundry org exactly the same. Cloud Foundry spaces should be named identically across the three tiers (dev, test, prod).
Directory |
mycompany-hr |
my-company-sales |
my-company-IT |
||||||
Subaccounts and subdomains |
mycompany-hr-dev |
my-company-hr-test |
my-company-hr-prod |
my-company-sales-dev |
my-company-sales-test |
my-company-sales-prod |
my-company-IT-dev |
my-company-IT-test |
my-company-IT-prod |
Cloud Foundry Orgs (same name as subaccounts) |
mycompany-hr-dev |
my-company-hr-test |
my-company-hr-prod |
my-company-sales-dev |
my-company-sales-test |
my-company-sales-prod |
my-company-IT-dev |
my-company-IT-test |
my-company-IT-prod |
Spaces |
project-portal activity-recording |
project-portal activity-recording |
project-portal activity-recording |
customer-acquisition sales-support |
customer-acquisition sales-support |
customer-acquisition sales-support |
it-support central-service |
it-support central-service |
it-support central-service |
In this account model, you create different directories for geographical areas. Additionally, for example, you can add labels to subaccounts that belong to the same departments in those locations. Alternatively, you could nest additional directories inside these ones.
In this account model, you create directories for each subsidiary of your company. Additionally, you can add labels, for example, for cost centers or owners of the individual subaccounts or directories.