VO manager

VO manager is a person or group of people allowed to manipulate with VO data. The first manager of particular VO must be created by Perun admin. VO manager can utilize both CLI interface and web GUI to operate system entities. VO manager is responsible for the following tasks:

Adding users among VO members

VO manager is allowed to select the user that will become a member of the VO from external identity resources or resources available to the VO. Choosing your VO from the VO list in GUI, you will see not only details about VO but also menu items in the left part. VO manager uses a menu to administer VO. Button Members serves to list all VO members. Button Add  enables to select a new user from the list of candidates. Button Search  is used to search for the user. User detail is shown by clicking the user in the list of members. Button Remove  serves to remove a member from VO.

Creating a VO manager from VO member

VO manager is allowed to create a VO manager from any other VO member. A detailed tutorial on how to add VO manager.

Group administration

VO inner structure can be enhanced by a hierarchy of groups. Every group has access rights to particular resources in VO. Group administration is described in a detail in Group manager's manual.

Creating a group manager from VO member

VO manager can create a group manager from VO member. How to create a Group manager is described in Group manager's manual.

Adding VO members into the group

VO manager and Group manager can add a VO member into the group. The whole process is described in the Group manager's manual.

Creating resource tags

VO manager can create tags for resources. Detailed tutorial: how to create a resource tag.

Resource utilization

The Resource is part of the Facility that can VO utilizes. It is created by the Facility manager, but only the VO manager is allowed to manipulate it. First, select a particular VO in GUI. Button Resources  shows a list of resources in VO. Button Remove  removes selected Resources. By clicking the row with the name of Resource, the detailed information appears. By clicking the tab Assigned groups, the list of assigned groups is listed. Tab Assigned services show a list of assigned services. By clicking on the button Service settings, a page with attributes' settings is shown. These attributes are necessary for the proper functioning of services.

How to:


Managing an application form

Creating rules to account extensions

It is necessary to set attribute membershipExpirationRules for VO. The attribute can be added in Settings in VO. Its items can be:

doNotAllowLoa - list of LoAs separated by comma, which won't be allowed in VO (users can't become members).
period - time period to extend membership. It can be set as fixed date (without year), e.g. 1.1 or as number of days/months/years with prefix "+"
that defines time period that extends membership. Units are d = day, m = month, y = year, e.g. +128d extends account to 128 days. +6m, +1y.
doNotExtendLoa - list of LoAs separated by comma, that are not extensible.
gracePeriod - when present date of initial application or extending request equels extension date minus gracePeriod then user account is extended to the next time period
(period date in next year). Value is in format number days/months/years. Units are d = day, m = month, y = year, e.g. 128d, 6m, 1y
periodLoa - an exception in period for given LoA. Format of value is: LoA|period[.]. LoA is given Loa number and period is in same format as a period.

Optional dot at the end means whether extend an account to user with filled membershipExpiration or not. If dot is present, user with filled membershipExpiration is not allowed to extend an account.

More tasks

Full list of all VO manager tasks