For a local role, select the enterprise that the role belongs to
From the Roles list select the role
In the Privileges pane, select or deselect the privileges
To add or remove groups of privileges, click the All privileges checkbox beside the group name
You cannot undo but you can discard the changes
Save the changes by clicking Save
The platform will discard your changes if you do an action outside of the Privileges pane, for example, clicking on a another role name
Note
Role troubleshooting and tips
Roles
The default CLOUD_ADMIN role has all privileges and is locked
You can only access roles with the same privileges or fewer privileges than your own role
You cannot modify your own role.
Privileges
You can only select or deselect privileges that are in your own role
Privileges are generally independent. For example, for a user with a role without the "Access Infrastructure view" privilege, the Infrastructure icon does not display in the UI. However, if this user's role has the privileges to "Manage datacenters" and "View datacenter details", the user will be able to access these functions through the API
The platform will discard your changes if you do an action outside of the Privileges pane, for example, clicking on a another role name