HyAlto Application Description

Owned by Matteo Iacovitti
Sept 01, 2021
2 min read

Application Architecture


HyAlto is a cloud-based SaaS application that facilitates the tracking and billing of vSphere workloads. HyAlto also automates the orchestration of new workloads and change management of existing ones.

HyAlto is an application layer that sits atop vSphere and provides a multi-tenanted web portal allowing end-user to perform changes to their workloads without accessing vSphere directly.

To accomplish this, HyAlto imports vSphere object metadata and allows the Service Provider to map required vSphere objects to company tenants created in HyAlto. These objects are gathered using API calls that are tunneled securely using TLS 1.2 through a HyAlto virtual machine appliance hosted in the vSphere datacenter.

Collected vCenter Metadata


HyAlto collects information on the following resources:

  • Datacenters

  • Virtual Machines

  • Virtual Apps

  • Networks

  • Folders

  • Datastores

  • Compute Resources

  • Cluster Compute Resources

  • Distributed Virtual Portgroups

  • Distributed Virtual Switches

  • Resource Pools

  • Datastore Clusters

  • Storage Profiles

The information is gathered through the vCenter API and further details about the data collected can be view at the following resource: - VMware {Code} Community

vCenter Permissions

HyAlto recommends configuring the connection to vSphere using a user with the built-in administrator role however the permissions listed below can be used to create a custom role.

Role Used

Privileges

Assigned Object

Propagation

Read-only

default built-in

  • Hosts and Clusters -> VCSA

  • Hosts and Clusters -> Datacenter in question

  • No

  • No

Administrator

default built-in

  • VMs and Templates -> Datacenter -> Folder in question

  • Yes

Custom Role

  • Datastore -> Allocate space

  • Network -> All sub- privileges

  • Profile-driven storage -> All sub-privileges

  • Resource -> All sub- privileges

  • Tasks -> All sub-privileges

  • Virtual machine ->

    Configuration -> All sub-

    privileges

  • Virtual machine -> Guest

    operations -> All sub-

    privileges

  • Virtual machine ->

    Interaction -> All sub- privileges

  • Virtual machine -> Inventory -> All sub- privileges

  • Virtual machine -> Provisioning -> All sub- privileges

  • Virtual machine -> Service configuration -> All subprivileges

  • Virtual machine -> Snapshot management -> All sub-privileges

  • vApp -> Add virtual machine

  • vApp -> Assign resource pool

  • vApp -> Assign vApp

  • vApp -> Clone

  • vApp -> Create

  • vApp -> Delete

  • vApp -> Move

  • vApp -> Power off

  • vApp -> Power on

  • vApp -> Rename

  • vApp -> Suspend

  • vApp -> Unregister

  • Hosts and Clusters -> Datacenter -> Cluster in question

  • Hosts and Clusters -> Datacenter -> Cluster -> All hosts in cluster

  • Storage -> Datacenter -> All datastores and datastore clusters

  • Networking -> Datacenter -> Folder containing network objects

  • No

  • No

  • Yes

  • Yes

Â