<html style="direction: ltr;">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style id="bidiui-paragraph-margins" type="text/css">body p { margin-bottom: 0cm; margin-top: 0pt; } </style>
</head>
<body bidimailui-charset-is-forced="true" style="direction: ltr;">
<div class="moz-cite-prefix">On 19/11/2020 21:41, denis walker via
db-wg wrote:</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">Good questions.</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">I'll try to clarify.</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">The parent organization has attained
their ASN and ip-nets from RIPE NCC over the past 10 years.<br>
</div>
<div class="moz-cite-prefix">The sub-organization is planning on
buying IP nets via the IP bourse/exchange and purchase multihoming
at IXPs and thereby qualify for their own ASN from RIPE NCC.<br>
</div>
<div class="moz-cite-prefix">The question is whether to establish
their own LIR or use the existing parent LIR.</div>
<div class="moz-cite-prefix">You state "...LIR-PARTITIONED or
ALLOCATED-BY-LIR. The suborganisations can separately manage their
resources."</div>
<div class="moz-cite-prefix">When I examined user privs in the LIR
portal I saw there is admin or regular - each of which give total
control to any resource listed under the LIR.</div>
<div class="moz-cite-prefix">Your suggestion of using a different
MNTNER is intriguing, but wouldn't at some point the parent LIR
have to know the password?</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">Thanks,</div>
<div class="moz-cite-prefix">Hank<br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<blockquote type="cite"
cite="mid:CAKvLzuHH-MweVxc5GeazMmMa26VpPk-6NFFbEwuhE9+Fz7bmOA@mail.gmail.com">
<pre class="moz-quote-pre" wrap="">Hi Hank
Your scenario is not clear. When you say "each has their own
resources", how did they get those resources? Were they separate LIRs
that have received allocations, have there been mergers, were they all
allocated to the parent organisation's LIR and distributed to sub
organisations? Or do you mean they each want to have their own
resources?
As far as the database is concerned, address space resources allocated
to the parent organisation's LIR can be distributed to sub
organisations as LIR-PARTITIONED or ALLOCATED-BY-LIR. The sub
organisations can separately manage their resources. If you want
exclusive management control by the sub organisations you can set the
MNTNER attributes accordingly. But ultimately they are still the
parent organisations resources. They could be reclaimed by the parent
organisation. The organisation reference in the allocations will
always be the parent organisation that was allocated the resources by
the RIPE NCC. That cannot be changed.
cheers
denis
co-chair DB-WG
On Thu, 19 Nov 2020 at 16:28, Hank Nussbacher via db-wg <a class="moz-txt-link-rfc2396E" href="mailto:db-wg@ripe.net"><db-wg@ripe.net></a> wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">
Can a LIR account handle multi-tenancy?
What if you had a parent organization and a few sub-organizations and each has their own resources (ASN + inetnum) that they wish to manage independently (objects, RPKI, etc) without the other sub-organizations of parent organization able to affect the resources.
Is that at all possible or is the only solution to create a new LIR account?
Thanks,
Hank
Caveat: The views expressed above are solely my own and do not express the views or opinions of my employer
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
</pre>
</blockquote>
<p><br>
</p>
</body>
</html>