Customer Portal Overview

The Customer Portal in Contrail Service Orchestration (CSO) provides a Web-based UI that tenants of service providers (SPs) and operating companies (OpCos) can use to manage sites and devices, apply policies (firewall, NAT, SD-WAN, and so on), and perform administrative tasks. In Customer Portal, the objects that you manage and the actions that you perform are done in the context of a single tenant. Therefore, objects belonging to one tenant are isolated from objects belonging to other tenants.

Customer Portal supports role-based access control (RBAC), which means that the roles assigned to users determine their access privileges and the actions that they can perform. The following predefined roles are available in Customer Portal:

Tenant Admin
Tenant Operator

Administrator users have read access and write access to the Customer Portal UI and API capabilities, whereas operator users only have read access. Administrators can also create more users with specific roles and access privileges.

When you log in to Customer Portal, the main menu (left sidebar) that is displayed and the actions that you can perform depend on your access privileges. Table 1 displays the main menu available in the Customer Portal, a brief description of each menu item, and a link to the relevant topic in the Contrail Service Orchestration Customer Portal User Guide.

Main Menu	Description
Dashboard	Access a user-configurable dashboard that you can customize with available widgets (also known as dashlets). For more information, see About the Customer Portal Dashboard.
Monitor	Monitor or view the following: Sites: See About the Monitor Overview Page. Alerts and alarms: See About the Generated Alerts Page and About the Alarms Page. Alert definitions and notifications: See About the Alert Definitions/Notifications Page. Link switchover events (for SD-WAN sites): See About the SD-WAN Events Page. Device events: See About the Device Events Page. Security events: See About the All Security Events Page. Application service-level agreement (SLA) performance (for SD-WAN sites):: See About the SLA Performance of a Single Tenant Page. Application visibility (for SD-WAN sites): See About the Application Visibility Page. User visibility: See About the User Visibility Page. Threat maps: See About the Threats Map (Live) Page. Jobs (ongoing or completed): See About the Jobs Page.
Resources	Manage the following resources: Sites: See About the Sites Page. Devices: See About the Devices Page. Deploy or stage images: See About the Device Images Page. Site groups: See About the Site Groups Page. Mesh tags: See About the Mesh Tags Page. Site templates: See About the Configuration Templates Page. Device templates: See About the Device Template Page. Configuration templates: See About the Configuration Templates Page.
Configuration	Configure the following: Intent-based firewall policies: See About the Firewall Policy List Page. Unified threat management (UTM): See About the UTM Profiles Page. NAT policies: See About the NAT Policies Page. Intrusion prevention system (IPS): See About the IPS Signatures Page and About the IPS Profiles Page. SSL proxy: See About the SSL Proxy Policy Page. SD-WAN policies: See About the SD-WAN Policy Page. SLA-based and path-based steering profiles: See About the SLA-Based Steering Profiles Page and Adding Path-Based Steering Profiles. SD-WAN breakout profiles: See About the Breakout Profiles Page. SD-LAN profiles and firewall filters: See About the Port Profiles Page and About the EX Firewall Filters Page. Shared objects (for example, IP addresses): See About the Addresses Page. View and manage deployments: See About the Deployments Page. View network services: See About the Network Services Page.
Reports	Add and manage security and SD-WAN report definitions, and generate reports: See About the Security Report Definitions Page and About the SD-WAN Report Definitions Page. View generated security and SD-WAN reports: See About the Security Generated Reports Page and About the SD-WAN Generated Reports Page.
Administration	Perform various administrative tasks including the following: Manage users and roles: See About the Users Page in Customer Portal and About the Tenant Roles Page. Monitor audit logs: See About the Audit Logs Page. View device and CSO licenses: See About the Device Licenses Page and About the CSO Licenses Page. Modify tenant settings: See View and Edit Tenant Settings. Install signatures: See About the Signature Database Page. Manage certificates and VPN authentication: See About the Certificates Page and About the VPN Authentication Page. Set up and configure Juniper Identity Management Service (JIMS) See About the Identity Management Page. Integrate with Mist Access Points (APs): See Enabling Integration with Mist Access Points.

Customer Portal Overview

Related Documentation