Note: Please go to to access the current RightScale documentation set. Also, feel free to Chat with us!
Home > Reference Info > Dashboard Help Text > Accounts



Your RightScale Account Information

The Dashboard supports the ability to access multiple accounts. Select available accounts from the pull-down menu in the upper right-hand corner of the Dashboard.

Settings > Account Settings > Show

Preferences tab

The Preferences tab lists the preferences of the RightScale account you are currently viewing. This tab is only visible to users with 'admin' role privileges in the account.

  • Instance Available - If enabled, email notifications will be sent to the owner's email address of the current RightScale Account when an instance becomes operational (default). Email notifications are sent from "" so you might want to check if your email is filtering them out if you do not see them in your email inbox.
  • Server tag scope - Specify whether you want your server tags to function across an account or contained within a deployment (default).
  • Billing Admin-only - If enabled (default), only users with the 'admin' or 'billing' user role privileges will be able to view billing-related statistics. If disabled, all users of a RightScale account will be able to view deployment-specific cloud usage costs.
  • Verify Inputs - If enabled, you will always view the Inputs Confirmation screen prior to manually launching a single instance. If disabled, the input confirmation screen will not be shown if all required inputs have been specified. However, if values are missing for required inputs, you will view the input confirmation screen prior to launching an instance. It's recommended that you keep the default 'enabled' setting.
Settings > Account Settings > Show > Preferences tab

Clouds tab

The Clouds tab lists the cloud infrastructures that are currently enabled on the selected RightScale account. You can also enable other public clouds or add a private cloud. You must have 'admin' role privileges in order to create/delete a cloud account. Before you delete a cloud account from RightScale, be sure you understand its ramifications.

Action Buttons

  • Edit - Add or edit credentials for a cloud.
  • Delete - Remove a cloud account.
  • Add a Public Cloud - Provide cloud credentials to add a public cloud. (e.g. AWS, Rackspace)
  • Add a Private Cloud - Provide a Cloud Token to add a private cloud. (e.g. CloudStack, OpenStack)
Settings > Account Settings > Show > Clouds tab

Users tab

The Users tab lists all of the users that have access to the RightScale account, as well as their associated permissions (roles). Each user will be able to select the account from the dropdown menu in the upper right. A change to a user's roles will take effect immediately. You can either delete a user or edit their permissions. Be sure to choose your users and their permissions wisely since any cloud related activity will use the account's cloud (AWS) credentials. See the Invitations tab to invite additional users to your account.

Action Buttons

  • Edit - Edit the user role privileges of account users. Requires 'admin' role privileges in the account.
Settings > Account Settings > Users tab

Account Groups tab

The Account Groups tab shows a list of (Account Group) memberships. When an 'admin' user in the current RightScale account accepts an invitation to an Account Group, the account becomes a member of that group and instantly gains access to all of the shared RightScripts, ServerTemplates, MCIs, and Macros within that collection. Shared components are published by other RightScale accounts. Access to the shared components can be changed at any time at the discretion of the publisher. However, once a shared component is imported/subscribed to, it will remain in the RightScale account's local collection even though a publisher may later deprecate it from the Account Group. Components that have been shared with this RightScale account can be found in the appropriate collection of the Library by clicking the "Shared" text link.

Action Buttons

  • Add - If you've received an invitation to access an Account Group's components, you can accept the invitation by entering the membership code. Similarly, you can click the link that was sent in the email invitation. Note: Only 'admin' users will be able to accept an Account Group Invitation on behalf of an account.
Settings > Account Settings > Show > Account Groups tab

Authorization Logging tab

With Authorization Logging enabled, you can send authentication events through Amazon SNS each time a RightScale user authenticates against the RightScale Dashboard or API. Amazon's Simple Notification Services enables applications, end-users, and devices to instantly send and receive notifications from the cloud. The purpose of this tutorial is to show RightScale account managers how to monitor authentication events of RightScale's Dashboard and API and have those events sent to an SQS queue that is managed in RightScale.


  • Edit - When you edit authentication logging, you can ???enable??? or ???disable??? this feature. By default, this feature is ???disabled.???

  • Status - Specified whether or not the service is enabled or disabled.

  • AWS SNS Topic ARN - The unique ARN (Amazon Resource Name) assigned by AWS after creating an SNS Topic. It consists of the service name, region and AWS ID.(e.g. arn:aws:sns:us-east-1:123456123456:authorization-60210)
  • Subscriber AWS Account Number - The AWS Account Number to which the SNS Topic belongs.
Settings > Account Settings > Authorization Logging

SSH tab

The Server Login Control feature allows you to use a private SSH Key Pair instead of using your cloud SSH keys for shell access. SSH Key Pairs are unique for each user and are used across all RightScale accounts. By default, RightScale manages a user's public and private keys. But if you would like all users in an account to manage their own key pair for security reasons, it is possible to make this a requirement before a user can SSH into a server. This would essentially disable RightScale from managing an SSH Key Pair for users of an account.

Settings > Account Settings > SSH

Access Control tab

The Access Control section lets you specify the range of IP addresses that can login to RightScale or from which users or programs can access RightScale API endpoints. This feature can be used by account administrators to enable access to RightScale through a company's IP address. Fields

  • IP Range (CIDR) - Specify the IP Range in CIDR notation to control the range of IP addresses that will be allowed access for your account. (default) allows access to any IP address whereas denies access to all IP addresses. As a safety precaution you cannot create a rule where your own IP address is denied access, otherwise you could accidentally lock yourself out of your own account.
  • Description (Optional) - This is a user-defined description to help describe the purpose of the IP Range.
Settings > Account Settings > Access Controls

Plan tab

The Plan tab lists your current RightScale plan type and the name of the Master account, if applicable. If you wish to upgrade your plan, please contact us.

Settings > Account Settings > Show > Plan tab

API Credentials tab

The API Credentials tab displays your OAuth API information and allows you to enable or disable this feature to generate a token or revoke a token.


  • Status - Enable or disable OAuth 2.0 access for your account.
  • Token Endpoint - The protected resource endpoint with access to the client credentials in order to validate the request.
  • Refresh Token - The token that can be used to make calls through the API. This token does not expire and is valid unless the status is disabled. Your token should be kept private.
Settings > Account Settings > API Credentials

Info tab

The Info tab shows general information about the RightScale account you're currently viewing, including your account type (direct, sub-account, etc.) and the owner (based on the email address that was used to initially create the RightScale account).

You can also change ownership of a RightScale account. For example, you might want to associate a different email address with a RightScale account so that email notifications that are sent from RightScale when instances become available are sent to a different email address(Preferences tab). For example, you might want to create an alias that sends such notifications to all of your system administrators. (e.g.

Settings > Account Settings > Show > Info tab

Administered Clouds tab

The Administered Clouds tab lists the private clouds that have been registered with this RightScale account.

Register Your Private Cloud The administrator of the private cloud should be the person who registers the cloud with RightScale. Only an 'admin' user of a RightScale account will be able to register a private cloud. Once a private cloud has been registered with RightScale, you can grant other RightScale accounts access to use your private cloud by giving them a Cloud Token, which they can use for authentication purposes when add a private cloud to their account.

Settings > Account Settings > Administered Clouds tab

Invitations tab

The Invitations tab shows any pending Invitations you have sent out. If you have 'admin' role privileges of the RightScale account, you can send account invitations to other users. When you send an email invitation, you must use the same email address that is associated with a user's RightScale account. If a user has not signed up for a RightScale account, he/she must sign up using the same email address in order to accept (activate) the invitation. You can also designate the desired permissions (roles) that the user will have on your account (ec2actor, ec2observer, etc.). Both the sender and the recipient will receive the email invitation. Email invitations will be sent from "" so they may get stuck in an email spam folder. Invitations will expire after six days. You can invite as many users to your account as long as you grant them 'admin' role privileges. However, there are limits to how many non-admin users you can invite to your account based on your plan type. (Website/Grid/ISV: 5, Enterprise: unlimited)

Contact us to inquire about adjustments to these limits.

Action Buttons

  • Invite Users - Go to the form where you can send a user an account invitation. You need to specify an email address and user roles privileges. Invite Permanent Users - Specify a user email address and configure the user role privileges to invite a user permanently. Invite Temporary Users - Specify a user email address and configure the user role privileges to invite a user temporarily. Specify the amount of days the user will be granted these permissions.

To learn more about Permanent and Temporary Invitations, see Invite Users to a RightScale Account to inquire about adjustments to these limits.

Settings > Account Settings > Show > Invitations tab

Server Defaults tab

The Server Defaults tab lists the cloud components that are available for configuring as default settings for servers in your account. These defaults can also be set at the deployment level. When setting defaults at the deployment level, you can inherit account defaults.


  • Cloud - Select a cloud to set server defaults. You may set different defaults for each cloud.
  • Instance Type -Set the instance type (size) to be used as an account default. Default is "Inherit from MultiCloud Image".
  • SSH Key - Select a default SSH Key to be used as a default.
  • Security Group(s) - Select a Security Group to be used as a default.
  • Datacenter - Select the regional datacenter to be used as a default.
Settings > Account Settings > Server Defaults
You must to post a comment.
Last modified
08:51, 3 Jun 2013


This page has no custom tags.


This page has no classifications.



© 2006-2014 RightScale, Inc. All rights reserved.
RightScale is a registered trademark of RightScale, Inc. All other products and services may be trademarks or servicemarks of their respective owners.