vania-janet/multiturn-rag-retrieval-data huggingface dataset:
[Business unit administration](https://cloud.ibm.com/docs/enterprise-account-architecture?topic=enterprise-account-architecture-bu-admin-account) 1-25 Production BU account groups Hosts infrastructure as code to manage workload accounts and the workload account's applications and infrastructure 
 [Workload](https://cloud.ibm.com/docs/enterprise-account-architecture?topic=enterprise-account-architecture-infra-account) 2-500 Development and production BU account groups Hosts shared infrastructure for hosting application workloads. Used in development - production pairs 
 [Infrastructure as code development and test](https://cloud.ibm.com/docs/enterprise-account-architecture?topic=enterprise-account-architecture-iac-account) 1+1 Development BU account groups 1 Account to host cloud tools for infrastructure as code development and 1 for test deployments 
 [Backup](https://cloud.ibm.com/docs/enterprise-account-architecture?topic=enterprise-account-architecture-dr) 3-51 Store backup and DR data 1 for the Admin Account Group + 2 per BU (1 dev and 1 prod) 





 Rationale for separate development and production enterprises 

A separate enterprise is used for development and production for several reasons:



* Separation of concerns. It is easier to reason about the overall system when nonproduction and production resources are clearly separated.
* Accounting. Ensures that R&D costs are separated from production costs that are required to be handled differently under GAAP and other accounting standards.
* Networking. Makes it possible to isolate the production and nonproduction networks and install rules that ensure production applications don't accidentally depend on nonproduction resources.
* Scale. Doubles the maximum number of accounts and applications that can be managed.
* Alignment with IBM use. IBM Cloud uses this pattern internally, so it is well tested.



There are some limitations to using multiple enterprises, for example subscription commitments and credits are separately calculated for each enterprise at this time.





 User Access 

In general, users should not be directly provisioned within this account structure.
Net revenue is defined as the revenue recognized by IBM or an IBM affiliate calculated using applicable discounts, refunds, returns, offsets, and other adjustments determined in accordance with the current revenue recognition policies of IBM and its affiliates and the controlling accounting principles. For full detail regarding payouts, refer to the Digital Platform Reseller Agreement that must be signed in Partner Center to offer usage-based pricing.





 How can I generate a new IBM Cloud Identity and Access Management API Key? 

You're given your API Key when you enable IAM. It is critical that you save the API Key. The value is not shown again. If you lose your API Key, you can delete the key and create a new one. For more information, see [Managing service ID API keys](https://cloud.ibm.com/docs/account?topic=account-serviceidapikeys).





 How can I view and test my service as a customer? 

Before you publish your service to the catalog, you can test how your customers will see and use it from the IBM Cloud catalog. In Partner Center, go to your Product details, and click View catalog entry. This view enables you to preview your service in the catalog and check that the broker and pricing is working as expected by creating an instance in your account.





 What is the Startup with IBM Program? 

The [Startup with IBM Program](https://developer.ibm.com/startups/), formerly the IBM Global Entrepreneur Program (GEP), is an IBM corporate program helps you startup or scale up your business with or without funding. Acceptance decisions, length of participation, awarding of credits, and any possible extensions are made by the Startup with IBM Team and not IBM Cloud Support.

If your application to the program is approved, awarded credits are referred to as the Technology Incubator Program on an IBM Cloud Invoice. For more information about the program and its credits, see [Startup with IBM FAQs](https://developer.ibm.com/startups/faq).





 What is IBM PartnerWorld? 

[IBM PartnerWorld Program](https://www.ibm.com/partnerworld/resources) is an IBM corporate program that provides access to the IBM product portfolio including the IBM Cloud Platform.
* [Consumer accounts for application provider workloads](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-account-consumer)
* [Handling and securing secrets](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-secrets)
* [IBM Cloud account setup](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-account-setup)







 IBM Cloud for Financial Services profile 

The rules related to this control that follow are part of the IBM Cloud for Financial Services v1.2.0 profile in [IBM Cloud® Security and Compliance Center](https://cloud.ibm.com/docs/security-compliance?topic=security-compliance-getting-started).



Rules for AC-2 in IBM Cloud for Financial Services v1.2.0 profile

 Requirement ID Rules 

 AC-2 (a) <br><br> * IBM Cloud accounts are one of the account types used to support your applications<br><br><br> 
 AC-2 (d) <br><br> * Check whether permissions for API key creation are limited and configured in IAM settings for the account owner<br> * Check whether IAM roles are used to create IAM policies for IBM resources<br> * Check whether IAM users are attached to at least one access group<br><br><br> 
 AC-2 (g) <br><br> * Check that Activity Tracker Event Routing is configured to collect global events generated by IBM Cloud services<br><br><br> 







 NIST supplemental guidance 

Information system account types include, for example, individual, shared, group, system, guest/anonymous, emergency, developer/manufacturer/vendor, temporary, and service. Some of the account management requirements listed above can be implemented by organizational information systems. The identification of authorized users of the information system and the specification of access privileges reflects the requirements in other security controls in the security plan.
For example, for a large organization, you might organize your accounts by geography, or by department. You can choose the structure that best fits how you want to track your usage. If your teams change, no problem - you can move accounts within the enterprise as needed.

Consolidated billing simplifies invoicing and payment within your enterprise. Usage costs are deducted from a subscription credit pool that's shared between all accounts, so you can add and manage subscription credit from a single place. This unified view of your credit spending means you can right-size your subscriptions across all of your usage to make sure you're getting the best deal. And there's no juggling multiple invoices - your enterprise billing administrator gets a single invoice with the details of any charges. It's that simple.

If you want to dive into the details to see where your money is going, you can do that. Enterprises provide top-down usage reporting so you can analyze costs for usage in your accounts and account groups. You have visibility from the enterprise level down to the resource type in each account.

Whether you prefer to manage your cloud through the IBM Cloud console, the CLI, or our robust APIs, we have the capability to fit your work style. Learn more and start creating your enterprise at [https://cloud.ibm.com/enterprise](https://cloud.ibm.com/enterprise).







 Enterprise hierarchy 

At its core, an enterprise consists of three main building blocks:



* The enterprise account, which serves as the parent account to all other accounts in the enterprise. The enterprise account manages billing for the entire enterprise, with usage costs from all accounts that are rolled up and paid from the enterprise account.
* Account groups, which you can use to organize related accounts. Account groups can't contain resources themselves, but you can view costs for resource usage from the accounts that they contain.
* Accounts, which are just like stand-alone IBM Cloud accounts in that they contain resources and resource groups, Cloud Foundry orgs and spaces, and independent access permissions. However, one major difference is that each account in an enterprise doesn't manage its own billing or payments because these are handled at the enterprise account level.
If you have an account, go to the [Account settings](https://cloud.ibm.com/account/settings) page in the console to apply the code.

If you upgrade your trial account to a Pay-As-You-Go account by entering a credit card, it can't be converted back to a trial account. IBM Cloud trial accounts are available for faculty and students at accredited academic institutions. Trial accounts expire after 30 days. Your account is deactivated when the trial period ends. To reactivate your account, log in to your account and upgrade it to a Pay-As-You-Go account.

If you import a trial account into an enterprise, it's automatically upgraded to a [Pay-As-You-Go account](https://cloud.ibm.com/docs/account?topic=account-accounts).

Support for a trial account is limited to nontechnical support issues that are related to account access and billing. Users with trial accounts can view the [IBM Cloud documentation](https://cloud.ibm.com/docs/get-support?topic=get-support-using-avatar), Chat with Watson, and use [Stack Overflow](https://stackoverflow.com/questions/tagged/ibm-cloud).





 Pay-As-You-Go account 

With a Pay-As-You-Go account, you can access the full IBM Cloud catalog, including all Free and Lite plans. You pay only for billable services that you use and monthly commitments, with no long-term contracts or commitments. When you register with IBM Cloud, you get a Pay-As-You-Go account, and you receive a [$200 credit](https://cloud.ibm.com/docs/account?topic=account-upgrading-account) to help get you started. You can use the $200 credit on IBM Cloud products.

Your resource usage consists of recurring and fluctuating costs. If you purchase classic infrastructure services, you're billed on an hourly or monthly recurring basis in advance of use, like a rent bill. If you purchase platform services, your invoice fluctuates as your resource usage fluctuates, similar to a utility bill.
Adoption guidelines for regulated and highly available workloads 

For regulated and highly available workloads, consider the following adoption guidelines when using the IBM Log Analysis service:



 Define resources naming standards for compliance 

When you create resources in the IBM Cloud, you can choose how to name them, what information to include in their description fields, which tags to use to group them, associate metadata, and more.

Define naming standards that do not include PII and other sensitive information across all resources that are created in the IBM Cloud.





 Define the account management strategy 

In IBM Cloud, you can have 1 or more stand-alone accounts. You can manage each account individually or within an enterprise by configuring a multitiered hierarchy of accounts.

Within an enterprise account, you create a multitiered hierarchy of accounts, with billing and payments for all accounts managed at the enterprise level. [Learn more](https://cloud.ibm.com/docs/account?topic=account-what-is-enterprise).



* The root enterprise account serves as the parent account to all other accounts in the enterprise.
* Users and access management is isolated between the enterprise and its child accounts. No access is automatically inherited between the two types of accounts.
* Resources and services within an enterprise function the same as in stand-alone accounts. Each account in an enterprise can contain resources in resource groups.



Notice that an enterprise can contain up to 5 tiers of accounts and account groups. In its most basic form, an enterprise has two tiers: the enterprise account, and a single child account.

The following table highlights some of the key features per account management strategy:



Table 1. Types of accounts

 Feature Stand-alone account management Enterprise account management 

 Multitiered hierarchy of accounts NO ![Checkmark icon](https://cloud.ibm.com/docs-content/v1/content/f61dbc5d84bf0c89e477a05cab04c72f429e1b7a/log-analysis/images/checkmark-icon.svg) 
 Billing and payments managed from 1 account !
11. Click Add to add your policy configuration to your policy summary.
12. Click Assign.







 Step 8: View usage from all accounts 



1. Log in to the Example Corp enterprise account.
2. In the IBM Cloud console, go to Manage > Billing and usage, and select Usage.

The Usage page displays the costs for all usage in your enterprise, which is broken down by account and account group. Usage information for classic infrastructure services is not included for the current billing period. For more information, see [Viewing usage for your classic infrastructure resources](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-infra-usage).
3. Click Marketing in the table to view usage within the account group. Similar to the enterprise level, usage is broken down by the account and account group.
4. To view usage by resource, go to the account level by clicking through account groups in the table or selecting the account from the Enterprise menu. Costs are shown for each type of resource that was used during the time frame.



Repeat the steps to view usage for the Development, Sales, Design, and Engineering account groups.

From the enterprise account, you can't view usage data for the resource plan or instance because it requires access within the account. Click Switch to the account to view data for the account. You need billing access to the resources and services in the account. See [Viewing your usage](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-viewingusage) for more information.

Data is shown in the enterprise account only for usage that is incurred by accounts in the enterprise. To view usage from before an account was added to the enterprise, log in to that account and select the relevant time frame.





 Next steps 

Now that you learned the basics of how to set up an enterprise, you can continue to add accounts, account groups, and users as your teams and cloud workloads grow. For more information, see [Managing your enterprise](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-create-enterprise).
Choosing a plan and creating an instance 

Getting data into your instance of IBM Cloud® Object Storage requires just a few steps before you provision your new storage.



 About IBM Cloud Object Storage plans 

The highest level of organization in IBM Cloud Object Storage is a service instance. Each instance can hold many buckets, and each bucket can hold virtually any number of objects (files). There are four types of Object Storage service instances:

IBM Public Cloud:



1. Lite plan instances are free to use, but are somewhat limited in capacity (< 25GB) and features. It is typically used for experimentation and proof-of-concept work, and will need to be converted to a Standard plan instance to access complete functionality.
2. Standard plan instances are the most common and are recommended for most workloads.
3. One Rate plan instances should be used for [workloads that involve large volumes of outbound bandwidth](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-onerate) (data transferred on public networks outside of IBM Cloud) relative to the amount of total storage capacity.

IBM Cloud Satellite:
4. Satellite instances are [run on hardware outside of IBM Cloud](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-provision-cos-satellite) and are typically used for edge computing or for strict data sovereignty requirements







 Creating a IBM Cloud Platform account 

Before you create a new IBM Cloud Object Storage storage instance, it's necessary to create a customer account first.



1. Go to [cloud.ibm.com](https://cloud.ibm.com/) and click Create a Free Account.
2. Complete the form with your email address, name, region, and phone number. Choose a password.
3. Follow the link provided by the confirmation email, and follow the links to log in to the IBM Cloud® Platform.



Now that you have a platform account, you can create a new Object Storage service instance.





 Creating a service instance 



1. Log in to [the console](https://cloud.ibm.com/).
"value": "crn:v1:bluemix:public:is:us-east:a/CRN"
},
{
"type": "vpc",
"value": "crn:v1:bluemix:public:is:us-south:a/CRN"
},
{
"type": "serviceRef",
"ref": {
"service_name": "cloud-object-storage",
"account_id": "ACCOUNT-ID"
}
},
{
"type": "serviceRef",
"ref": {
"service_name": "codeengine",
"account_id": "ACCOUNT-ID"
}
},
{
"type": "serviceRef",
"ref": {
"service_name": "containers-kubernetes",
"account_id": "ACCOUNT-ID"
}
},
{
"type": "serviceRef",
"ref": {
"service_type": "platform_service",
"account_id": "ACCOUNT-ID"
}
},
{
"type": "serviceRef",
"ref": {
"service_name": "iam-groups",
"account_id": "ACCOUNT-ID"
}
}
],
"excluded": []
}

After you create zones, you can [update](https://cloud.ibm.com/apidocs/context-based-restrictionsreplace-zone) or [delete](https://cloud.ibm.com/docs/account?topic=account-context-restrictions-remove&interface=ui) them.





 Creating network zones by using the UI 

After you set the prerequisites and requirements, you can create zones in the UI.
"type": "access",
"description": "Editor role for SERVICE_NAME's RESOURCE_NAME",
"subjects": [
{
"attributes":
{
"name": "iam_id",
"value": "IBMid-123453user"
}
]
}'
],
"roles":[
{
"role_id": "crn:v1:bluemix:public:iam::::role:Editor"
}
],
"resources":[
{
"attributes":
{
"name": "accountId",
"value": "$ACCOUNT_ID"
},
{
"name": "serviceName",
"value": "$SERVICE_NAME"
},
{
"name": "resource",
"value": "$RESOURCE_NAME",
"operator": "stringEquals"
}
]
}
]
}'







 Establishing trust with compute resources with the API 

Complete the following steps to set up better control over granting access to compute resources.

IBM Cloud Kubernetes Service supports only trusted profiles for versions 1.21 and newer. Free IBM Cloud Kubernetes Service clusters create only earlier versions. You have the choice to create clusters with an earlier version with the standard plan, so be sure to select version 1.21 or newer.



1. Create a trusted profile by specifying your account ID.

curl -X POST 'https://iam.cloud.ibm.com/v1/profiles' -H 'Authorization: Bearer TOKEN' -H 'Content-Type: application/json' -H 'Accept: application/json' -d '{
"name": "My Nice Profile",
"description": "My Nice Profile - desc",
"account_id": "ACCOUNT_ID"
}'

In the description, provide a list of actions available for this trusted profile.
2.
Create a policy on a service in an account Account owner, administrator on all Identity and Access enabled services, or administrator on the service in the account 
 Create a policy on a service instance Account owner, administrator on all Identity and Access enabled services, administrator on the service in the account, administrator on all services in the relevant resource group, or administrator on the service instance 





 Common access policy types 

You can provide fine-grained access for users, service IDs, or access groups by assigning the following types of access policies:



* All Account Management services
* A specific account management service
* All IAM Account Management services, which are a subset of account management services that includes IAM Identity, IAM Access Management, IAM User Management, and IAM Groups
* A specific IAM service
* All resources within the account
* All resources within all services that belong to an individual resource group with the ability to manage the resource group
* All resources within a single service in a resource group with the ability to manage the resource group
* All resources within a single service across the account, regardless of the resource group they're assigned to
* Resources in an individual instance
* A single resource type within an instance, for example, a bucket in an Object Storage instance



If you want to enable a user full administrator access to complete the [account management tasks](https://cloud.ibm.com/docs/account?topic=account-account-servicesaccount-services), such as inviting and removing users, viewing billing and usage, managing service IDs, managing access groups, managing user access, and access to all account resources, you must assign a user the following access:



* A policy for All Identity and Access enabled services within the account with the administrator and manager roles assigned.
* A policy with the administrator role assigned on All Account Management services.







 Assigning IBM Cloud access policies 

To help you further understand how access is assigned by using access policies in IBM Cloud in relation to other cloud providers that you might be familiar with, check out the following details and example of an access policy.
Estimating your costs 

You can use the cost estimator to estimate the cost of IBM Cloud® products by customizing plans that fit your business needs. Your account type doesn't affect your estimates. Explore the catalog to find available products to add to an estimate.

Estimates can now be saved to an account. Make sure you're in the account that you want to save the estimate to. If you have existing estimates, they must be converted to a saved estimate that is attached to an account.



 Creating a new estimate 



1. In the IBM Cloud console, go to Cost estimator icon![Cost estimator icon](https://cloud.ibm.com/docs-content/v1/content/9713d864488177dc6b273b53b7f2383a81f10bc1/icons/calculator.svg). From here, you are directed to Estimating your costs page.
2. Click Create new estimate.
3. Enter a name and description for the estimate.
4. Click Create
5. From here, you are directed to the estimate details page. Click Go to catalog to add products to the estimate.
6. Select the product that you are interested in.

Depending on the product, an interim informational page might be displayed. For example, if you select Bare Metal Servers, an informational page that describes various features is displayed. Click Continue.
7. Select your pricing plan and enter other configuration details if needed. Then, click Add to estimate.

Some products might require that you log in to add them to an estimate.
8. Enter your estimated usage, and click Calculate Cost. You can adjust the estimated usage and recalculate the cost to see how different usage levels affect the overall cost.



By default, the estimator shows the pricing and billing currency set for your account. Pricing can vary by region. If you're estimating costs for a different location or currency, you might have to select the appropriate currency on the order summary page for the product or change the currency on your account.



1.