Hello,
In your circumstance, where you're using the vCenter Server datacenter object to limit visibility, you do have the capability to limit visibility within Skyline Advisor. However, to accomplish this, you won't use RBAC, but instead multiple Cloud Services Organizations. Focusing on the datacenter object, I'll walk through how you can accomplish this.
TENANT 1:
- Create Cloud Services Organization for TENANT 1.
- Install Skyline Collector virtual appliance for TENANT 1, only add the datacenter object within the Skyline Collector for TENTANT 1.
- Add TENANT 1 users to the Cloud Services Organization for TENANT 1, granting access to the Skyline Advisor service role.
TENANT 2:
- Create Cloud Services Organization for TENANT 2.
- Install Skyline Collector virtual appliance for TENANT 2, only add the datacenter object within the Skyline Collector for TENTANT 2.
- Add TENANT 2 users to the Cloud Services Organization for TENANT 2, granting access to the Skyline Advisor service role.
TENANT 3:
- Create Cloud Services Organization for TENANT 3.
- Install Skyline Collector virtual appliance for TENANT 3, only add the datacenter object within the Skyline Collector for TENTANT 3.
- Add TENANT 3 users to the Cloud Services Organization for TENANT 3, granting access to the Skyline Advisor service role.
What you'll end up with is 3 Cloud Services Organizations, one for each tenant. Additionally, you'll have 3 Skyline Collectors, each with the same vCenter Server added to it, but you'll choose to Collect Only from specific data centers when adding the vCenter Server to the Skyline Collector, for each specific tenant. Within Skyline Advisor, each TENANT will only see information for the data center you have specified within the Skyline Collector.
You'll end up with an architect that looks similar to this:
Each Cloud Services Organization will have it's own Skyline Advisor service. You can then grant access to each Cloud Services Organization (and Skyline Advisor) based upon the Tenant.
Within the Skyline Collector, here is where you choose to Collect only from select data centers.
If you need assistance with this process, please let us know. Thank you.
Excellent! Thanks for the detailed response. Makes sense, I can work on this.
We actually have 3 vcenters in linked mode, UK, East Coast and West Coast US. Because of this, I deployed three skyline collectors anyway, because at the time this was considered best practice for the collectors to pull data only from the same geographic region - I guess this still is the preferred approach? In our case then, with 3 vcenters and 3 tenants, we'd be looking a 9 collectors?
It's no big deal, I can get it done - but I'll likely putting in a feature request to configure object visibility / permissions within a single cloud services org 
Many thanks for your help
