We currently have a mix of ASD and IaaS blueprints. I want to move all our IaaS blueprints to be ASD blueprints that call the underlying IaaS blueprints. Right now my vRO vRA plug-in uses a service account to connect to vRA. I have some ASD blueprints that use the "requestCatalogItemOnBehalfOf" action. This doesn't work very well because the IaaS catalog item im executing on behalf of the user needs to be entitled to both the user I'm submitting on behalf of and the service account submitting the request. What this means is that the user will see both the IaaS and the ASD blueprints in the catalog. We want users to only see the ASD blueprints.
My thought was to entitle the IaaS blueprints to just the service account and the ASD blueprints to users. I would then just run the "requestCatalogItem" action which would provision the IaaS item in the business group the service account was in and owned by the service account. During the "provisioned" stage I would change the group and owner of the item to the submittors. I see how to change the owner and the group pretty easily but i don't see the connection for the storage part.
Is anyone out there doing this? Any suggestions on how to approach this or just the method to update the storage associated with the group im moving the ownership of the provisioned item to?