Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from this space and version 8.0.0

...

ProVision's DNSv3 combines server management, group organization, and zone management under the DNS tab. 

The DNS tab contains four sub-tabs: DNS Groups,  DNS Servers, DNS Zones, and DNS Records.

The DNS Groups tab is where DNS Groupsgroups, zones, ACL's, and default SOA values are managed.  The The DNS tab Groups  tab Groups List  allows allows you to create, view, and manage groups of DNS Servers servers and Zoneszones. Using groups, you can configure and push selected combinations of zones at one time.

...

The DNS Zones tab lists all the zones in ProVision able to be viewed by the user, in the same format as on the DNS Groups page, but without the Group group organization. The Zone List allows you to view, add, delete, and push individual DNS Zoneszones

The DNS Records tab list all records in ProVisionviewable by the user, in a filterable list to expedite search, editing, and managing records. New records may also be added from this page.

...

DNSv3 organizes ProVision's DNS system into a more unified and accessible interface, combining both admin and non-admin DNS tasks together under the DNS tab.

In DNSv3, zones are gathered under DNS Groupsgroups, servers are attached to those Groupsgroups, and Nameservers, Default SOA values, and ACLs are managed at a per-Group group level. Users can then view and manage Groupsgroups, individual zones, default SOA values, ACLs, attach servers, and perform pushes all on the same page. 

...

DNSv3 incorporates DNS zones and Groups groups into ProVision's the Resource System. Zones and Groups groups are Resources resources just like Customers, Servers, Routers, or Contacts (See See Resource Concepts for a more detailed explanation of Resources resources in ProVision).

This allows for DNS zones and Group group permissions to be managed similarly to other ProVision resources, where where users with Resource resource permissions (Create / Read / Update / Delete) on the parent resource of the DNS Group group can create groups and zones, manage those groups and zones, push (if a server is attached), and delete.

A user with full Resource resource permissions on a DNS Serverserver, as well as the parent resource of a Groupgroup, may view and attach that server to a Groupgroup

Users with Admin permissions can access the DNS Serversservers area under the the DNS tab manage DNS server creation, edits, and deletion.

For more information on setting up permissions groups in ProVision, see see Users & Permissions.

Permission Shortcut Button ("Perms")

...

This permissions button allows for direct, point-of-use permissions adjustments to DNS Groupsgroups, Serversservers, Zoneszones, and Recordsrecords. It uses the same CRUD permissions and groups available in the Admin Users tab, but removes the need to remember and search for the DNS item name. 

...

Edit the CRUD permissions for any ProVision user group by clicking the checkbox for the desired group and permission type. When done, click "Save Changes". The permission changes will be also be reflected in the Admin User tab Group settings

DNS Approvals

The Approvals module stores and queues DNS actions made by selected User Groups, and sends those actions to a Pending Changes list for administrative review.  Later, an administrator (or combination of administrators) can approve or reject these stored actions. 

Approvals is primarily set up and managed via the Admin Approvals Tab. See the ProVision Admin Guide - Approvals Tab for details on setting up and using Approvals from the Administrative viewpoint. 

In the DNS Tab, a "Resources Awaiting Approval" module will display near the top of DNS Groups, DNS Zone Lists, and DNS Servers pages, if a change has been submitted on that page that is pending approval. 

...

DNSv3 Workflow

DNSv3 revolves around Groupsgroups. Zones are gathered under Groupsgroups, servers attached to Groupsgroups, and pushes may be done on a per Group group level. Thus, the first workflow step in DNSv3 is to set up one or more DNS Groupsgroups. A "Default Group" is automatically provided in ProVision, but other Groups groups may be desired to organize zones and default values.

To create a new DNS Groupgroup, click the "Add Group" button from the DNS Groups tab. Enter the desired default values for the Groupgroup, and save. If only using the Default Group, ensure the default parameter values are set as needed. For more information, see see Working with DNS Groups.

After Groups groups have been set up, DNS servers should be added or settings verified. Admin users may add DNS servers from the DNS Servers tab "Add Server" button. Input the server information and save. Existing servers may be reviewed and edited by clicking on the server name in the DNS Server List. Once a server is created in ProVision, it may be attached to any DNS Group group under the Groupgroup's "Attached Servers" module. Attaching a server to a Group group will allow for zones in that group to be pushed to the attached server(s). See See Working with DNS Servers.

Next, add zones to your groups. Zones may be manually added under each group by clicking the "Add Zone" button in the DNS Groups or DNS Zones tabs, or it may be imported via DNS Importers into a selected Groupgroup. Add the zone and record information, and save. See See Working with DNS Zones - Common Tasks for additional information.

Zones may only exist once per Groupgroup, but may be duplicated under multiple Groupsgroups. Zones may also be moved from Group group to Group group as needed. 

At this point, all major components of the ProVision DNS system have been added - from here management tasks take over. Zones may be updated and moved to or from Groupsgroups; Groups may be edited with different default values or servers, and pushes maybe be performed for an individual zone, a full Groupgroup, or for an entire server. Pushes may be manual or scheduled for a future time through the Scheduler.

...