Subnet Reseller Assignments
On the subnet detail page, you can assign entire subnets to resellers. Once a subnet is assigned to a reseller and the reseller has the necessary permissions, they can independently manage and assign the IP addresses from that subnet to their servers, using the same IP assignment workflow that administrators are already familiar with.
This feature gives resellers more control over their IP resources, while still respecting all existing subnet limitations set by the administrator.
Overview
Assigning a Subnet to a Reseller
In the subnet detail view, you can choose which reseller should have access to the full subnet. Only whole subnets can be assigned, it is not possible to assign individual IP addresses from a subnet.
When the subnet owner is changed, Tenantos performs a basic check to determine whether the subnet contains IP assignments to servers belonging to users the reseller does not have permission to access. However, as noted in the dialog, this is only a basic check and does not block the assignment, even if issues are found. Depending on specific requirements, this behavior may be acceptable or desired for some users.
Required Permissions
In order for a reseller to manage IP assignments on their own servers, they need both of the following permissions:
- Add Server IP Assignments
- Delete Server IP Assignments
- Change Server Primary IP Assignment (optional)
Without these permissions, which are not enabled by default, a reseller cannot make changes to server IP assignments, even if the reseller is assigned a subnet.
If the reseller has these permissions, they can add and remove IP assignments just like a Tenantos administrator.
Subnet Restrictions
All existing limitations you have configured on the subnet remain in place. This includes:
- Tag-based restrictions: If you have configured that a subnet is only offered if the server has a certain tag (or is not offered if the server has a certain tag), then these restrictions also apply to any servers of your resellers. Reseller can not add tags to bypass these restrictions.
- Remote agent assignments: If a subnet can only be assigned to servers with a specific remote agent assignment, then the same rule applies to the servers that are assigned resellers.
Child Subnets
If there are child subnets (for example, in the case of IPv6), they must be assigned individually to the reseller if you want the reseller to manage them. Mass actions are possible to assign all child subnets at once.
VLAN Automation
If VLAN automation is enabled for the servers assigned to the reseller and the assigned subnet is configured to support automatic VLAN actions, you can configure in the system settings whether network automation tasks are performed.
Normally, Tenantos administrators have the option to choose between performing, dry-running, or not executing the automation tasks.