Fernando,
Do you mean you want to give extra UI access or just the API? As you showed
the API access is the same already, but that does not change the UI and
shows extra tabs or so, You'll need to hack the javascript to have tabs
hidden or visible other than the defaults. (also I'd say upgrade from 4.9
if you can)
On Sun, Nov 17, 2019 at 8:54 PM Fernando Alvarez <luganofer@gmail.com>
wrote:
> Hi everyone,
>
> I need to create a new role like Domain Admin role plus access to "virtual
> appliance" flap in network domain menu.
> No access to "Infrastructure" and "Global Settings" (is for level 2 support
> area).
> I tried comparing the list of permissions of the "Domain Admin" and
> "Resource Admin" role related to the virtual router but I can't find a
> difference between them:
>
> (Arsat-Prod) 🐵 > list rolepermissions | grep -i router
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c4b6d38-8ba3-11e7-b03c-7e6885eea84b,changeServiceForRouter,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c32696d-8ba3-11e7-b03c-7e6885eea84b,changeServiceForRouter,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c4bb89f-8ba3-11e7-b03c-7e6885eea84b,configureVirtualRouterElement,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c32d222-8ba3-11e7-b03c-7e6885eea84b,configureVirtualRouterElement,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c4f4f0b-8ba3-11e7-b03c-7e6885eea84b,createVirtualRouterElement,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c36c75f-8ba3-11e7-b03c-7e6885eea84b,createVirtualRouterElement,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c537adc-8ba3-11e7-b03c-7e6885eea84b,destroyRouter,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c3b0202-8ba3-11e7-b03c-7e6885eea84b,destroyRouter,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5a308f-8ba3-11e7-b03c-7e6885eea84b,listRouters,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c41f14c-8ba3-11e7-b03c-7e6885eea84b,listRouters,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5b7a4a-8ba3-11e7-b03c-7e6885eea84b,listVirtualRouterElements,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c439b01-8ba3-11e7-b03c-7e6885eea84b,listVirtualRouterElements,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5cca93-8ba3-11e7-b03c-7e6885eea84b,rebootRouter,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c44f5d3-8ba3-11e7-b03c-7e6885eea84b,rebootRouter,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5e7590-8ba3-11e7-b03c-7e6885eea84b,startRouter,allow
> Domain
>
> Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5e96a1-8ba3-11e7-b03c-7e6885eea84b,stopRouter,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c46c127-8ba3-11e7-b03c-7e6885eea84b,startRouter,allow
> Resource
>
> Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c46e5a0-8ba3-11e7-b03c-7e6885eea84b,stopRouter,allow
>
> Currently I'm usign cloudstack 4.9.3.1.
>
> It's possible to create this new role?
>
> Thanks in advance.
>
> --
> Fernando.
>
--
Daan
|