vania-janet/multiturn-rag-retrieval-data huggingface dataset:
ibmcloud enterprise account-group-update 

Update an account group.

ibmcloud enterprise account-group-update (-n, --name NAME | --id ID) (--new-name NEW_NAME)



 Command options 

--id ID (required)
: ID of target account group. This option is exclusive with -n, --name.

-n, --name NAME (required)
: Name of target account group. This option is exclusive with --id.

--new-name NEW_NAME (required)
: New name of target account group.







 ibmcloud enterprise account-group 

Display details of account group.

ibmcloud enterprise account-group (-n, --name NAME | --id ID)



 Command options 

--id ID (required)
: ID of the account group. This option is exclusive with -n, --name.

-n, --name NAME (required)
: Name of the account group. This option is exclusive with --id.







 ibmcloud enterprise account-groups 

List account groups.

ibmcloud enterprise account-groups [--parent-account-group ACCOUNT_GROUP_NAME | --parent-account-group-id ACCOUNT_GROUP_ID] [--recursive]



 Command options 

--parent-account-group ACCOUNT_GROUP_NAME (optional)
: Name of the parent account group. This option is exclusive with --parent-account-group-id.

--parent-account-group-id ACCOUNT_GROUP_ID (optional)
: ID of the parent account group. This option is exclusive with --parent-account-group.

--recursive (optional)
: Show descendant account groups.







 ibmcloud enterprise account-create 

Create an account.

ibmcloud enterprise account-create NAME [--parent-account-group ACCOUNT_GROUP_NAME] [--owner USER_ID]



 Command options 

NAME (required)
: Account group name.

--owner USER_ID (optional)
: User ID of the account group.
* UI
* CLI
* API







 Organizing accounts in an enterprise 

Use account groups to organize related accounts in your IBM Cloud® enterprise. You can create a multitiered enterprise hierarchy by nesting account groups within an account group. If you need to, you can reorganize by moving accounts between account groups.

For example, the following diagram depicts a four-tier enterprise that you can set up by nesting account groups. First, you create two account groups that have the enterprise as the parent. Then, you can create two additional account groups that have one of those account groups as a parent. You can move accounts freely within the account groups, no matter what tier they're in. However, account groups cannot be moved.

Zoom

![A diagram that shows four enterprise tiers. The top tier is the enterprise, which contains two tiers of account groups. Then, the account group contains accounts.](https://cloud.ibm.com/docs-content/v1/content/d4595e5202a9a27767cf034e81b038cdf772e0d5/secure-enterprise/images/enterprise-hierarchy.svg)

Figure 1. A four-tier enterprise hierarchy

Remember that how you organize your enterprise impacts how you can track usage costs. For more information, see [Centrally manage billing and usage with enterprises](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-enterprise).



 Creating account groups 

To create an account group, you need the Administrator or Editor role on the Enterprise service in the enterprise account.



 Creating account groups in the console 



1. From the Enterprise dashboard in the IBM Cloud console, click Accounts to view the accounts and account groups in the enterprise.
2. In the Account groups section, click Create.
3. Enter a name for the account group that reflects the accounts that it will contain. See [How can I use an enterprise?]
Planning for the landing zone deployable architectures 

Before you begin the deployment of a landing zone deployable architecture, make sure that you understand and meet the prerequisites.



 Confirm your IBM Cloud settings 

Complete the following steps before you deploy the VPC landing zone deployable architecture.



1. Confirm or set up an IBM Cloud account:

Make sure that you have an IBM Cloud Pay-As-You-Go or Subscription account:



* If you don't have an IBM Cloud account, [create one](https://cloud.ibm.com/docs/account?topic=account-account-getting-started).
* If you have a Trial or Lite account, [upgrade your account](https://cloud.ibm.com/docs/account?topic=account-upgrading-account).



2. Configure your IBM Cloud account:



1. Log in to [IBM Cloud](https://cloud.ibm.com) with the IBMid you used to set up the account. This IBMid user is the account owner and has full IAM access.
2. [Complete the company profile](https://cloud.ibm.com/docs/account?topic=account-contact-info) and contact information for the account. This profile is required to stay in compliance with IBM Cloud Financial Services profile.
3. [Enable the Financial Services Validated option](https://cloud.ibm.com/docs/account?topic=account-enabling-fs-validated) for your account.
4. Enable virtual routing and forwarding (VRF) and service endpoints by creating a support case. Follow the instructions in [enabling VRF and service endpoints](https://cloud.ibm.com/docs/account?topic=account-vrf-service-endpoint&interface=uivrf).









 Set the IAM permissions 



1. Set up account access (Cloud Identity and Access Management (IAM)):



1.
This option is exclusive with --parent-account-group.

--recursive (optional)
: Show descendant accounts.







 ibmcloud enterprise account-import 

Import a stand-alone account.

ibmcloud enterprise account-import (--account-id ID) [--parent-account-group ACCOUNT_GROUP_NAME | --parent-account-group-id ACCOUNT_GROUP_ID]



 Command options 

--account-id
: ID of source account.

--parent-account-group PARENT_ACCOUNT_GROUP (optional)
: Name of the parent account group. This option is exclusive with --parent-account-group-id.

--parent-account-group-id PARENT_ACCOUNT_GROUP_ID (optional)
: ID of the parent account group. This option is exclusive with --parent-account-group.
VPE-enabled services 

The following IBM Cloud services are enabled for Virtual Private Endpoints (VPE) gateway connectivity.

When configuring a VPE gateway, you are shown a customized list of common services and any services that were provisioned with your account.



* App Configuration ([Endpoint URLs](https://cloud.ibm.com/apidocs/app-configurationendpoints-list-all))
* Catalog Management ([Endpoint URLs](https://cloud.ibm.com/apidocs/resource-catalog/private-catalogendpoint-url))
* Cloud Object Storage
* Code Engine ([Instructions](https://cloud.ibm.com/docs/codeengine?topic=codeengine-vpe))
* Container Registry ([Instructions](https://cloud.ibm.com/docs/Registry?topic=Registry-registry_vpe))
* Context-based restrictions ([Endpoint URLs](https://cloud.ibm.com/apidocs/context-based-restrictionsendpoint-urls))
* Databases ([Instructions](https://cloud.ibm.com/docs/cloud-databases?topic=cloud-databases-vpes))
* Direct Link ([Instructions](https://cloud.ibm.com/docs/dl?topic=dl-vpe-connection))
* DNS Services ([Instructions](https://cloud.ibm.com/docs/dns-svcs?topic=dns-svcs-vpe-for-dns-svcsvpe-for-dns-svcs))
* Enterprise Billing Units ([Endpoint URLs](https://cloud.ibm.com/apidocs/enterprise-apis/billing-unitendpoint-urls))
* Enterprise Management ([Endpoint URLs](https://cloud.ibm.com/apidocs/enterprise-apis/enterpriseendpoint-urls))
For more information, see [Moving accounts within the enterprise](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-enterprise-organize).





 Can I move an account group? 

No, it’s not possible to move an account group within the enterprise.





 Can I edit an account name from within the enterprise? 

No, you can't edit the name of an account from within your enterprise. To edit the name of an account, go to Manage > Account in the IBM Cloud console, and select Account settings. In the Account section, click the Edit icon ![Edit icon](https://cloud.ibm.com/docs-content/v1/content/d4595e5202a9a27767cf034e81b038cdf772e0d5/icons/edit-tagging.svg), enter your new account name, and click Submit.





 Can I invite users to an enterprise? 

To invite users to an enterprise, you must have an IBM Cloud Identity and Access Management (IAM) access policy with the Editor or higher role on the User Management service. For more information, see [Inviting users](https://cloud.ibm.com/docs/account?topic=account-iamuserinvinvitations).





 Can my child account have a different subscription currency than my enterprise account? 

No, billing and subscriptions are managed at the enterprise level rather than at the child account level. Your child account cannot have a different subscription. For more information about enterprise billing, see [Billing options](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-enterprise&interface=uienterprise-billing-options).





 Can I change the domain for my enterprise account? 

Yes, domains can be updated. You can use the [Enterprise Management API](https://cloud.ibm.com/apidocs/enterprise-apis/enterpriseupdate-enterprise) to update your domain.





 Do individual child accounts receive separate invoices if they are in an enterprise account?
Best practices for setting up an enterprise 

These best practices provide you with the basic building blocks for setting up an IBM Cloud® enterprise. You can also review the [Enterprise account architecture](https://cloud.ibm.com/docs/enterprise-account-architecture) white paper to learn about how you can take advantage of automation and the recommendations for how large customers should configure and govern IBM Cloud at scale.



 Organizing accounts according to how you want to track billing 

A key benefit of IBM Cloud enterprises is that they enable you to centrally view and manage billing and usage across multiple accounts. This capability's usefulness depends on your enterprise structure because usage data is aggregated by each account group and account. Create account groups for projects that function under a common budget. See [How can I use an enterprise?](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-what-is-enterpriseenterprise-use-cases) for examples.

The enterprise administrator or your financial officer might not be familiar with each individual account or account group. To make it easier to identify their purpose, give each account and account group a human-readable name. If your company uses billing codes, you can also incorporate them into the name. For example, instead of a devteam account group with fed ui and be api accounts, create the Development - A2B3 account group with Front-end UI team and Back-end API team accounts.

An enterprise user with Administrator or Editor access can edit the enterprise and account group names, but they can't change account names. To edit an account name, a user must be in the account itself.

Because you have a unified view of all usage that's organized by your account groups and accounts, you can charge back usage costs to the associated teams. For more information, see [Recovering costs for enterprise usage](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-enterprise-usageenterprise-cost-recovery).





 Creating a consistent enterprise hierarchy 

When you set up your enterprise, you create an enterprise hierarchy that reflects your company or organization.
For example, you might have a stand-alone account where you run your development, pre-production, and production services and applications.

By using an enterprise management account strategy, you achieve greater isolation of resources. When you configure a multitiered hierarchy of accounts, you get the flexibility to separate your development environments into separate tiers, or isolate by Line of Business (LoB) applications and services, or a combination of both. Each account retains the features of a stand-alone account, and you can still manage billing and payments from the root enterprise account.

In addition to these benefits, when you look into logging and how it fits with any of these management strategies, consider the following facts that will be covered later on in the topic in more detail:



* Service platform logs are collected and available per location (region) through 1 single logging instance. You do not have the ability to split logs from different services running in the same region to multiple instances. If you run your development, test, and production services in a stand-alone account, all those logs will be available through the same logging instance, and any user with permissions to view logs in that instance will be able to see everything.
* You can configure other log sources in IBM Cloud and on-premisses to forward logs to any logging instance in your account.



Define an enterprise account management strategy to add an additional layer of isolation to resources in addition to stand-alone accounts.





 Configure account settings for compliance 

Across every industry, organizations require tight controls and visibility into where their data is stored and processed.

Indicate to IBM your compliance requirements by enabling your IBM Cloud account or IBM Cloud Entreprise account as HIPAA or EU supported.

In the IBM Cloud, you can configure your account for EU support and for HIPAA support:



* You might choose to enable the EU Supported setting, for example, if you use resources to process personal data for European citizens. For more information, see [Set on the EU-Supported flag in your account](https://cloud.ibm.com/docs/account?topic=account-eu-hipaa-supportedbill_eusupported).
For more information about enterprise billing, see [Billing options](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-enterprise&interface=uienterprise-billing-options).
* Can I change the domain for my enterprise account?

Yes, domains can be updated. You can use the [Enterprise Management API](https://%7BDomainName%7D/apidocs/enterprise-apis/enterpriseupdate-enterprise) to update your domain.
* Do individual child accounts receive separate invoices if they are in an enterprise account?

You can view usage for individual child accounts, but they are not individually invoiced. For more information about enterprise usage, see [Viewing usage in an enterprise](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-enterprise-usage&interface=ui).

For more information about enterprise billing, see [Centrally managing billing and usage with enterprises](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-enterprise).
* What account type do I need to create an enterprise account?

Only Subscription accounts can create an enterprise account.
* How many child accounts can I have in an enterprise account?

You can have a maximum of 300 child accounts that can be distributed across a maximum of 300 account groups. An enterprise can contain up to five tiers of accounts and account groups. For more information, see [Enterprise hierarchy](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-what-is-enterprise&interface=uienterprise-hierarchy)
* Can I create common resources for all of my child accounts?

Although you can create resources at the enterprise account level, this method is not a best practice. You can follow best practice by using resource groups and access groups to create and share resources.
However, you can still import these accounts into your enterprise by converting them to Subscription accounts and then importing them. To convert an account, contact [IBM Cloud Sales](https://www.ibm.com/cloud?contactmodule).

Each enterprise supports only a single billing currency. All accounts must use the enterprise billing currency before you add them to the enterprise. Existing accounts that are imported into the enterprise no longer separately manage their billing. As a result, subscription credit can't be added to individual child accounts. Subscription credit must be added to the enterprise account, where it becomes part of the enterprise credit pool.



 Billing transition when importing accounts 

When you import an existing account to an enterprise, its billing and invoicing transitions to being managed by the enterprise account. This transition includes the following changes to the account.



* For Subscription accounts that are added, the account type is changed to Pay-As-You-Go. This change reflects that the account does not have its own subscriptions, but it still has full access to production-ready, billable services.
* Subscriptions and promotions from each account are moved to the enterprise account, where they become part of the credit pool. After the move, each subscription has the same remaining credit and term period, but the subscription is given a new unique ID.
* Access to billing and payment information for future billing periods is restricted to users in the enterprise account. Users in a child account can't access billing and payment information, such as invoices, payments, or subscriptions, even if they previously had access in the account. To view or manage billing, users need to be invited to the enterprise account and given access to the Billing service in that account.
* Usage is invoiced to the enterprise account for the entire month when the account was added. For example, if you add an account to the enterprise on 15 June, all of the usage for the month of June is reflected in the July invoice.







 Shared credit pool 

The enterprise credit pool consolidates credit from all accounts in the enterprise and shares it with the accounts. The pool includes credit from all sources, including platform subscription credit, promotional credit, and support credit.
* For VPC Clusters that require Classic Infrastructure Access, you must [enable VRF](https://cloud.ibm.com/docs/account?topic=account-vrf-service-endpoint&interface=uivrf) & [service endpoints](https://cloud.ibm.com/docs/account?topic=account-vrf-service-endpoint&interface=uiservice-endpoint) in your account.
* For Classic clusters with a private service endpoint enabled, you must [enable VRF](https://cloud.ibm.com/docs/account?topic=account-vrf-service-endpoint&interface=uivrf) & [service endpoints](https://cloud.ibm.com/docs/account?topic=account-vrf-service-endpoint&interface=uiservice-endpoint).
: You can customize IBM Cloud deployable architectures to meet your enterprise’s needs, and then leverage private catalogs to make only approved and compliant architectures available for your enterprise developers to deploy. For more information, see [Customizing an IBM Cloud deployable architecture](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-customize-from-catalog).





 12 April 2023 

Specify language support for community-supported products
: If you offer a third-party product that is supported by open source communities, you can select the languages in which support is provided when you're onboarding or managing your product in Partner Center. By providing support in multiple languages, your customers can communicate their issues in their preferred language and get support more efficiently. For more information, see [Defining your support experience](https://cloud.ibm.com/docs/sell?topic=sell-saas-support-details&interface=ui).





 10 April 2023 

View email notification history
: You can use the Communication history page in the console to check the status of all email notifications that are sent you to verify if the emails are being delivered successfully. You can also view the last 90 days of IBM Cloud email history, which can help save you time troubleshooting any delivery issues without needing to contact IBM support. For more information, see [Checking the delivery status of email notifications and viewing email history](https://cloud.ibm.com/docs/get-support?topic=get-support-viewing-notificationsview-email-history).





 04 April 2023 

Customize the look and feel of your private catalog
: You can enhance the appearance of your private catalog to match your brand by adding a custom banner image to your private catalogs. For more information about personalizing your private catalog, see [Branding your private catalog with a custom banner](https://cloud.ibm.com/docs/account?topic=account-restrict-by-usercustomer-banner).

Add a custom provider name for your private products
: You can make it easier for users to search for your products added to a private catalog by specifying a custom provider name.
* IBM i 7.1 TR13



Linux - Power Systems Virtual Server supports Red Hat Enterprise Linux (RHEL) and SUSE Linux Enterprise (SLES) distributions. The following Linux stock images are currently available when you select Full Linux Subscription (learn more about [Full Linux Subscription](https://cloud.ibm.com/docs/power-iaas?topic=power-iaas-set-full-Linux)):

Red Hat



* RHEL8.4 for SAP HANA (RHEL8-SP4-SAP)
* RHEL8.4 for SAP NetWeaver (RHEL8-SP4-SAP-NETWEAVER)
* RHEL 8.4 general purpose (RHEL8-SP4)
* RHEL 8.6 general purpose (RHEL8-SP6)
* RHEL8.6 for SAP HANA (RHEL8-SP6-SAP )
* RHEL8.4 for SAP NetWeaver (RHEL8-SP6-SAP-NETWEAVER)



SUSE



* SLES 15 SP2 for SAP HANA (SLES15-SP2-SAP)
* SLES 15 SP2 for SAP NetWeaver (SLES15-SP2-SAP-NETWEAVER)
* SLES 15 SP3 for SAP HANA (SLES15-SP3-SAP)
* SLES 15 SP3 for SAP NetWeaver (SLES15-SP3-SAP-NETWEAVER)
* SLES 15 SP3 general purpose (SLES15-SP3)
* SLES 15 SP4 general purpose (SLES15-SP4)
* SLES 15 SP4 for SAP HANA (SLES15-SP4-SAP)
* SLES 15 SP4 for SAP NetWeaver (SLES15-SP4-SAP-NETWEAVER)



If you opt for a Linux subscription directly from Red Hat or SUSE, you will need to bring your own image. Power Systems Virtual Server supports custom images for following Linux distributions:

General purpose:



* SLES 12 SP4 or later and SLES 15 SP1 or later
* RHEL 8.4 or later



For SAP workloads:
See [Enterprise account architecture](https://cloud.ibm.com/docs/enterprise-account-architecture?topic=enterprise-account-architecture-about) for recommendations on how to address these concerns across accounts so that a robust, compliant, and scalable solution can be achieved.





 Organizing your enterprise 

Within an enterprise, you can create multiple accounts and account groups. With this structure, you can easily manage many accounts and many deployments.



 VPC reference architecture 

The following diagram shows a single enterprise with one account group that contains separate accounts for each deployment of the VPC reference architecture.

Zoom

![Enterprise account organization with VPC reference architecture](https://cloud.ibm.com/docs-content/v1/content/9ac5c38b41e0aa1cb4ccc6cc7f547751ec805221/framework-financial-services/vpc/images/resource-organization/vpc-enterprise-account-organization-beta2.drawio.svg)

Figure 7. Enterprise account organization with VPC reference architecture

When using enterprise accounts, it is recommended that you use one enterprise account for production and another enterprise account for development. See [Planning your enterprise account structure](https://cloud.ibm.com/docs/enterprise-account-architecture?topic=enterprise-account-architecture-account-structure) for more information.





 Satellite reference architecture 

The following diagram shows an enterprise with one account group that contains separate accounts for each deployment of the Satellite reference architecture.

Zoom

![Enterprise account organization with Satellite reference architecture](https://cloud.ibm.com/docs-content/v1/content/9ac5c38b41e0aa1cb4ccc6cc7f547751ec805221/framework-financial-services/satellite/images/resource-organization/satellite-enterprise-account-organization-beta2.drawio.svg)

Figure 8. Enterprise account organization









 Related controls in IBM Cloud Framework for Financial Services