CenturyLink Cloud supports the ability to create Sub accounts, which fall under a Parent account. Sub accounts have many advantages:
- They are hierarchal - user permissions flow down, not up nor sideways
- They may be billed separately or to the parent account
- They may share Parent networks or have their own
- Settings are inherited
Creating a Sub Account
- In CenturyLink Cloud’s Control Portal drop-down menu, select Account > Accounts.
- Click “+ create new account”
Change Parent account if desired. For example, if you want this account to be a Sub account of a Sub account.
Fill in the appropriate Business name, etc.
Input an Account Alias of your choice. This is a string of 2-4 alphanumeric characters which is used to identify your account and relate servers to that account by naming convention. They are globally unique so there are no duplicate aliases allowed. This is a required field. Note that an account alias cannot be reused, even after deletion of the original account with that alias.
Full Address and Phone fields are required.
You may input a Default Primary DNS and a Default Secondary DNS IP address. This will be the DNS server value input into your IPv4 settings when building a server. You may select your own environment DNS servers, preferred public DNS servers, or the default datacenter DNS servers (172.17.1.26, 172.17.1.27) or leave it blank, in which case it will default to the aforementioned Datacenter DNS servers, which do allow for external DNS lookup.
Bill to: Each Sub account generates an invoice. You have the option of submitting the invoice to the Parent account, or bill the Sub account directly.
Payment Type: Input the payment type for the Sub account.
Share Parent Networks: This allows the Sub account to use the networks present in its Parent account. If this is set to "NO", the Sub account will receive unique IP ranges when deploying servers and/or networks.
All settings will be inherited from the Parent. Go to "Yes any of the settings in this section will make that section visible in the sub account". The users in that Sub account will then be able to override inherited settings. Leaving the sections set to "OFF" will hide the menu for that section in the Sub account, preventing the settings from being overridden. In our example Sub account, users will be able to change the Account Logo and Account Color Scheme from what was inherited. All other menus will be hidden.
Select the datacenter that you want the new account to be homed to. This does not limit your ability to build in any other datacenter. Your VPN server will be created here. You will not be able to hide or change the Primary datacenter.
Click "Create" to create the Sub account as configured.
If the account is created successfully, you will be returned to the Parent account (the one you were logged into). You can navigate to the new Sub account via the Account drop-down to the left of the menu.
If you get any errors (i.e. the alias is in use, or missed any required fields), correct them and click Create again.
After the Sub Account is created you can edit the settings. Any of these settings may be modified in the future by logging into the Parent Account, then going to Account > Sub accounts and selecting the Sub account for which you wish to edit settings. You will be sent to the “Sub Account Settings” page.
Edit settings from the Parent account after the Sub account has been created.
Menus are hidden to the Sub account.
You can click any of these settings and toggle them between disabled (not visible) and enabled (visible and therefore editable).
To add new users to the sub account:
In the drop-down in the top left, select the Sub account for which you would like to add a user.
Go to Account > Users and click “+ Create New User”.
Fill in required information.
Permissions can then be administered via the Account > Permissions tab.
Note that user permissions are hierarchical, so a user may access the account to which they are assigned, and that account’s Sub accounts, but not a Parent account nor any other Sub account on the same level.
I just created my sub account. Why do I get a permission denied error when I try to access it?
Allow a few minutes for the new account to fully replicate and try again.
I don’t need this sub account any longer, how do I delete it?
Account > Info. Click on “Request to close” link at bottom right.
I disabled a sub account, but still see it in my sub accounts list.
A disabled Sub account still appears in the list, so you have the option to re-enable it. Entering the Sub account via the drop-down at the top left, and going to account > info and clicking the “Request to close” link will start the process to remove the account.