cloudstack-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Daan Hoogland <daan.hoogl...@gmail.com>
Subject Re: Create new role Domain Admin + VR Access
Date Tue, 19 Nov 2019 17:14:59 GMT
Fernando,
Do you mean you want to give extra UI access or just the API? As you showed
the API access is the same already, but that does not change the UI and
shows extra tabs or so, You'll need to hack the javascript to have tabs
hidden or visible other than the defaults. (also I'd say upgrade from 4.9
if you can)

On Sun, Nov 17, 2019 at 8:54 PM Fernando Alvarez <luganofer@gmail.com>
wrote:

> Hi everyone,
>
> I need to create a new role like Domain Admin role plus access to "virtual
> appliance" flap in network domain menu.
> No access to "Infrastructure" and "Global Settings" (is for level 2 support
> area).
> I tried comparing the list of permissions of the "Domain Admin" and
> "Resource Admin" role related to the virtual router but I can't find a
> difference between them:
>
> (Arsat-Prod) 🐵 > list rolepermissions | grep -i router
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c4b6d38-8ba3-11e7-b03c-7e6885eea84b,changeServiceForRouter,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c32696d-8ba3-11e7-b03c-7e6885eea84b,changeServiceForRouter,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c4bb89f-8ba3-11e7-b03c-7e6885eea84b,configureVirtualRouterElement,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c32d222-8ba3-11e7-b03c-7e6885eea84b,configureVirtualRouterElement,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c4f4f0b-8ba3-11e7-b03c-7e6885eea84b,createVirtualRouterElement,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c36c75f-8ba3-11e7-b03c-7e6885eea84b,createVirtualRouterElement,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c537adc-8ba3-11e7-b03c-7e6885eea84b,destroyRouter,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c3b0202-8ba3-11e7-b03c-7e6885eea84b,destroyRouter,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5a308f-8ba3-11e7-b03c-7e6885eea84b,listRouters,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c41f14c-8ba3-11e7-b03c-7e6885eea84b,listRouters,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5b7a4a-8ba3-11e7-b03c-7e6885eea84b,listVirtualRouterElements,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c439b01-8ba3-11e7-b03c-7e6885eea84b,listVirtualRouterElements,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5cca93-8ba3-11e7-b03c-7e6885eea84b,rebootRouter,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c44f5d3-8ba3-11e7-b03c-7e6885eea84b,rebootRouter,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5e7590-8ba3-11e7-b03c-7e6885eea84b,startRouter,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5e96a1-8ba3-11e7-b03c-7e6885eea84b,stopRouter,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c46c127-8ba3-11e7-b03c-7e6885eea84b,startRouter,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c46e5a0-8ba3-11e7-b03c-7e6885eea84b,stopRouter,allow
>
> Currently I'm usign cloudstack 4.9.3.1.
>
> It's possible to create this new role?
>
> Thanks in advance.
>
> --
> Fernando.
>


-- 
Daan

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message