Teams
Prerequisites
User Role:
Sub-admin, Admin
Permission Requirements
- Team Administration
- View all teams
- Create teams
- Edit any team
- Delete any team
- Add users to any team
- Remove users from any team
- User Administration
- Edit the details of users with a lower role (name, email, department, position)
The Teams table requires View all teams. Create new team requires Create teams; Edit metadata and Edit quotas require Edit any team; Delete requires Delete any team. Manage member(s) requires Add users to any team, and Assign to subadmin(s) requires both Add users to any team and Edit the details of users with a lower role (name, email, department, position).
Teams are resource constraint groups in tiCrypt. They serve three purposes:
- Resource quotas: each team defines total and per-user limits for CPU cores, memory, and storage. Every VM and drive belongs to a team and consumes quota from that team's allocation.
- User activation: unless you are a Super-admin, you cannot activate a user who is inactive and not in a team yet, so add new users to a team before you activate them.
- Administrative delegation: you can assign teams to sub-admins, who then manage the team's members and resources.
When creating teams, consider organizing them by department, research group, or resource tier.
The Teams Table
Location: Management > Teams > Teams
The table shows, for each team, the Name, Risk Assessment ID, Members, VMs, Cores and Quota Cores, Memory and Quota Memory, Total Storage, Total Drives, Att. Drives, Total Disk Space and Quota Disk Space, Files, and Total File Size. The chart panel compares the teams, for example by members and by cores.
Access Teams
- Go to the Management icon in the top left taskbar.
- Navigate to the Teams section.
- Click Teams in the left panel.
View the Teams' Details
- Go to the Management icon in the top left taskbar.
- Navigate to the Teams section.
- Click Teams in the left panel.
- Select the team to view.
- Click the View button in the top right panel.
- View the team name, number of members, description, creation and last modified dates, quotas, and member details in the left panel.
View the Teams' Quotas
- Go to the Management icon in the top left taskbar.
- Navigate to the Teams section.
- Click Teams in the left panel.
- Select the team whose quotas you want to view.
- Click the View button in the top right panel.
- Scroll down in the left panel under quotas.
- View total cores, memory, and drive allocation per team.
Create a New Team
- Go to the Management icon in the top left taskbar.
- Navigate to the Teams section.
- Click Teams in the left panel.
- Click the Create new team button in the top right panel.
- In the Create new team dialog, fill in the fields described in the table below.
- Click Create new team.
The following table describes the fields of the Create new team and Update <team> dialogs.
| Field | Description |
|---|---|
| Name | Required. Up to 80 characters, without / \ | " : * ? < > { }, and different from the other team names. |
| Risk Assessment ID (optional) | An identifier from your risk assessment process. Up to 40 characters, without <, >, { or }. |
| Description (optional) | Up to 250 characters, without <, >, { or }. Markdown is supported. |
| Custom fields | Extra fields an administrator added to teams. This section appears only when such fields exist. For more information, see Custom Fields. |
Add Users to Teams
- Go to the Management icon in the top left taskbar.
- Navigate to the Teams section.
- Click Teams in the left panel.
- Select the team to add users to.
- Click the Manage member(s) button in the top right panel.
- In the Manage users of <team> dialog, search for and select the users to add. With one team selected, the grid lists the current members, and you can remove members from it in the same dialog.
- Click Save. The button is enabled only after you add or remove at least one user.
Edit Teams' Metadata
- Go to the Management icon in the top left taskbar.
- Navigate to the Teams section.
- Click Teams in the left panel.
- Select the team whose metadata you want to edit.
- Click the Open full menu button in the top right panel.
- Select Edit metadata.
- In the Update <team> dialog, edit the name, risk assessment ID, description, and custom fields.
- Once done, click Update <team>.
Edit Teams' Quotas
- Go to the Management icon in the top left taskbar.
- Navigate to the Teams section.
- Click Teams in the left panel.
- Select the team whose quotas you want to edit.
- Click the Open full menu button in the top right panel.
- Select Edit quotas.
- In the Quotas for <team> dialog, edit the fields described in the table below.
- Once done, click Save. tiCrypt confirms with Updated quotas.
The following table describes the sections of the Quotas for <team> dialog.
| Section | Fields |
|---|---|
| Virtual Machine | Total VM cores and Total VM memory for the whole team. Turn on the toggle next to each to set Per user total VM cores or Per user total VM memory, the limit for each member. |
| Storage Pools | One rule per storage type, added with Add storage rule. Each rule has a Storage Type (Total storage, Vault storage, Drives storage, or Pool: <name> for a drive pool), a Value, and an optional Per user value turned on with its toggle. |
| Devices | One rule per device type, added with Add device rule. Each rule has a Device (Total devices, Any: <tag> for every device with a tag, or a specific device), a Value, and an optional Per user value. |
Every value must be a whole number of 0 or more, and a per-user value cannot exceed the team value ("User quota cannot exceed team quota"). Each storage type and device can have only one rule, and every rule needs a type.
What a quota value means
| Value | Effect |
|---|---|
| Blank, or no rule for that resource | No limit. The team, or each member for a per-user value, can use as much as the hardware allows. The user menu shows the limit as ∞. |
| 0 | Blocked. The team cannot use that resource at all: a VM that needs cores, memory or a device of that type does not start, and no drive or upload can use that storage. |
| Any other number | The limit, in cores, GB of memory or storage, or number of devices. |
A storage pool marked as requiring a quota is the one exception: until the team has a rule for that pool, the pool counts as 0 and is blocked for the team.
Remove Teams' Quotas
- Go to the Management icon in the top left taskbar.
- Navigate to the Teams section.
- Click Teams in the left panel.
- Select the team whose quotas you want to remove.
- Click the Open full menu button in the top right panel.
- Select Edit quotas.
- In the Quotas for <team> dialog, click the Remove quotas button in the bottom left.
tiCrypt deletes every quota of the team at once and closes the dialog with Deleted team quotas. There is no Save step and no confirmation. With no quotas, the team has no limits, except on storage pools that require a quota.
Removing quotas is not the same as setting them to 0. A value of 0 blocks the resource for the team: for example, a device rule of 0 stops every VM that requests that device type.
Assign a Team to a Sub-admin
- Go to the Management icon in the top left taskbar.
- Navigate to the Teams section.
- Click Teams in the left panel.
- Select the team you want to assign to a sub-admin.
- Click the Open full menu button in the top right panel.
- Select Assign to subadmin(s).
- In the Assign <team> to sub-admin(s) dialog, select one or more users in the Sub-admin(s) field. Only users with the Sub-admin role are listed.
- Click Assign.
tiCrypt grants each sub-admin management rights for the team and also adds them as a member of the team if they are not one already. The rights appear in Sub-admin Managed Objects.
Make Team Announcements
- Go to the Management icon in the top left taskbar.
- Navigate to the Teams section.
- Click Teams in the left panel.
- Select the team to make an announcement to.
- Click the Open full menu button in the top right panel.
- Select Make an announcement.
- In the Make an announcement to <team> dialog, enter the message. It is required, can be up to 250 characters, and cannot contain any of the characters
/ \ | " : * ? < > { }. - Click Send.
Announcements are not end-to-end encrypted. When the backend refuses you as the sender, tiCrypt shows You are not a member of <team>.
Refresh All Teams' Metadata
- Go to the Management icon in the top left taskbar.
- Navigate to the Teams section.
- Click Teams in the left panel.
- Click the Refresh button in the top right panel.
Remove Team Members
- Go to the Management icon in the top left taskbar.
- Navigate to the Teams section.
- Click Teams in the left panel.
- Select the team to remove members from.
- Click the Manage member(s) button in the top right panel.
- In the pop-up, click the Delete button next to the team members you want to remove.
- Click Save.
Removing members from a team also removes their team membership for that team.
Delete a Team
- Go to the Management icon in the top left taskbar.
- Navigate to the Teams section.
- Click Teams in the left panel.
- Select the team you want to delete.
- Click the Open full menu button in the top right panel.
- Select Delete.
- In the Delete <team>? dialog (or Delete N teams?), click Delete <team> (or Delete N teams).
You can delete several teams at once. The dialog explains: "Deleting a team is permanent. Team configuration will be wiped and members/resources/etc. will have to be re-assigned if an identical team is (re)created, and vice versa." If you lack the Create teams permission, it also warns that you will not be able to undo the action.
tiCrypt deletes the team and every membership in it. You do not need to remove the members first.