The following table describes all the privileges in the cloud platform.
| Info | ||
|---|---|---|
| ||
...
Home privileges
...
GUI Label _________________
...
Application Tag
...
Privilege____________________________________
...
Cloud Admin
...
Ent Admin
...
Ent User
...
Ent Viewer
...
Info
...
X
...
X
...
X
...
X
...
X
...
X
...
X
...
X
...
X
...
X
...
The following table describes all the privileges in the cloud platform.
| Info |
|---|
Changes to privileges |
Home privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
|---|---|---|---|---|---|---|---|
List enterprises within scope | ENTERPRISE_ENUMERATE | This privilege allows a user to view the list of enterprises within scope and to view statistics for those enterprises | X | ||||
Allow user to switch enterprise | ENTERPRISE_ADMINISTER_ALL | This privilege allows a user to change to another enterprise, in order to administer it, by clicking the switch user button in the Enterprises list | X | ||||
Display enterprise statistics | ENTERPRISE_RESOURCE_SUMMARY_ENT | This privilege allows a user to filter statistics by enterprise to display the resources used by an enterprise in the enterprise resources panel | X | X | X | ||
Display enterprise limits in statistics | ENTERPRISE_SHOW_STATS_LIMITS | This privilege allows a user to view enterprise limits in addition to resources used in the enterprise resources panel if the user has the Display enterprise statistics privilege | X | X | X | ||
View bills | BILLS_VIEW | This privilege allows a user to view bills and related widgets | X | ||||
Manage bills | BILLS_MANAGE | This privilege allows a user to manage bills | X | ||||
Services (XaaS) privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
Use default services | XAAS_USE_DEFAULT | This privilege allows a user to use default services | X | X | |||
Manage default services | XAAS_MANAGE_DEFAULT | This privilege allows a user to manage default services | X | ||||
Use enterprise services | XAAS_USE_ENTERPRISE | This privilege allows a user to use enterprise services | X | X | X | X | |
Manage enterprise services | XAAS_MANAGE_ENTERPRISE | This privilege allows a user to manage enterprise services | X | X | |||
Use user services | XAAS_USE_USER | This privilege allows a user to use user services | X | X | X | X | |
Manage user services | XAAS_MANAGE_USER | This privilege allows a user to manage user services | X | X | X | ||
Use datacenter services | XAAS_USE_DATACENTER | This privilege allows a user to use datacenter services | X | X | X | ||
Manage datacenter services | XAAS_MANAGE_DATACENTER | This privilege allows a user to manage datacenter services | X | ||||
Use public cloud region services | XAAS_USE_PUBLIC_CLOUD_REGION | This privilege allows a user to use public cloud region services | X | X | X | ||
Manage public cloud region services | XAAS_MANAGE_PUBLIC_CLOUD_REGION | This privilege allows a user to manage public cloud region services | X | ||||
Use location services | XAAS_USE_LOCATION | This privilege allows a user to use location services | X | X | X | X | |
Manage location services | XAAS_MANAGE_LOCATION | This privilege allows a user to manage location services | X | X | |||
Use virtual datacenter services | XAAS_USE_VIRTUAL_DATACENTER | This privilege allows a user to use virtual datacenter services | X | X | X | X | |
Manage virtual datacenter services | XAAS_MANAGE_VIRTUAL_DATACENTER | This privilege allows a user to manage virtual datacenter services | X | X | X | ||
Use virtual appliance services | XAAS_USE_VIRTUAL_APPLIANCE | This privilege allows a user to use virtual appliance services | X | X | X | X | |
Manage virtual appliance services | XAAS_MANAGE_VIRTUAL_APPLIANCE | This privilege allows a user to manage virtual appliance services | X | X | X | ||
Use virtual machine services | XAAS_USE_VIRTUAL_MACHINE | This privilege allows a user to use virtual machine services | X | X | X | X | |
Manage virtual machine services | XAAS_MANAGE_VIRTUAL_MACHINE | This privilege allows a user to manage virtual machine services | X | X | X | ||
Run actions on usable services | XAAS_EXECUTE | This privilege allows a user to run actions on the services they can use | X | X | X | ||
Infrastructure privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
Access infrastructure view and private DCs | PHYS_DC_ENUMERATE | This privilege allows a user to access the Infrastructure view and list the physical datacenters | X |
...
...
Display resource usage panel | PHYS_DC_RETRIEVE_RESOURCE_USAGE | This privilege allows a user to view the resource usage panel in the Infrastructure view | X |
...
...
Manage datacenter | PHYS_DC_MANAGE | This privilege allows a user to manage datacenters (add, edit and delete). Without it, the datacenter's properties will be read only | X |
...
View datacenter details | PHYS_DC_RETRIEVE_DETAILS | This privilege allows a user to go inside a datacenter and view its details (racks, physical machines, networks, storage and allocation rules) | X |
...
...
Manage datacenter infrastructure elements | PHYS_DC_ALLOW_MODIFY_SERVERS | This privilege allows a user to manage infrastructure elements (add, edit and delete racks and physical machines) | X |
...
Manage network elements | PHYS_DC_ALLOW_MODIFY_NETWORK | This privilege allows a user to manage network elements (add, edit and delete public networks |
...
X
...
) | X | ||||
Manage storage elements | PHYS_DC_ALLOW_MODIFY_STORAGE | This privilege allows a user to manage storage elements (add, edit and delete storage devices, pools, tiers and volumes) | X |
...
Manage allocation rules | PHYS_DC_ALLOW_MODIFY_ALLOCATION | This privilege allows a user to manage allocation rules (add and delete rules) | X |
...
...
Manage datacenter backup configuration | PHYS_DC_ALLOW_BACKUP_CONFIG | This privilege allows a user to manage backup configuration at datacenter level | X |
...
Manage devices | MANAGE_DEVICES | This privilege allows a user to setup networking devices (Neutron) | X |
...
Manage public cloud regions | PCR_MANAGE | This privilege allows a user to manage public cloud regions (add, edit and delete). Without it, the public cloud region's properties will be read only | X |
...
...
Access infrastructure view and PCRs | PCR_ENUMERATE | This privilege allows a user to access the Infrastructure view and list the public cloud regions | X |
...
...
View public cloud region details | PCR_RETRIEVE_DETAILS | This privilege allows a user to go inside a public cloud region and view its details (virtual machines and hardware profiles) | X |
...
Manage hardware profile types and family | MANAGE_HARDWARE_PROFILE_TYPE_AND_FAMILY | This privilege allows the user to manage hardware profile types and family (add, edit and delete) | X |
...
View and manage protection managers | MANAGE_DRAAS_CONFIG | This privilege allows the user to manage protection managers for disaster recovery (create, edit |
...
and delete) | X |
...
Virtual datacenters privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
|---|---|---|---|---|---|---|---|
Access virtual datacenters view | VDC_ENUMERATE | This privilege allows a user to access the Virtual Datacenters view | X | X | X | X |
...
Manage virtual datacenters | VDC_MANAGE | This privilege allows a user to manage virtual datacenters (add, edit and delete). Without it, the virtual datacenter details are read only | X | X |
...
Manage virtual appliances | VDC_MANAGE_VAPP | This privilege allows a user to manage virtual appliances (add, edit and delete) | X | X | X |
...
Manage virtual network elements | VDC_MANAGE_NETWORK | This privilege allows a user to manage private and public networks (add, edit and delete) | X | X |
...
Manage virtual storage elements | VDC_MANAGE_STORAGE | This privilege allows a user to manage storage volumes (add, edit and delete) | X | X |
...
...
Manage floating IPs | MANAGE_FLOATINGIPS | This privilege allows a user to manage floating IPs (add and delete) | X | X |
...
Manage firewalls | MANAGE_FIREWALLS | This privilege allows a user to manage firewalls (add, edit and delete) for virtual datacenters | X | X |
...
...
Manage load balancers | MANAGE_LOADBALANCERS | This privilege allows a user to manage load balancers (add, edit and delete) for virtual datacenters | X | X |
...
Manage virtual storage controller | VDC_MANAGE_STORAGE_CONTROLLER | This privilege allows a user to manage the controller of storage volumes | X | X | X |
...
Manage public IPs | MANAGE_PUBLICIPS | This privilege allows a user to manage public IPs for private virtual datacenters | X | X | X |
...
Modify allocation when attaching a disk | VDC_MANAGE_STORAGE_DISK_ALLOCATION | This privilege allows a user to modify the allocation of disks before they are deployed to the hypervisor and specify allocation when attaching a new disk and it is not possible once the VM is deployed (disk already created/copied) | X |
...
Manage NAT IPs | MANAGE_NATIPS | This privilege allows a user to manage NAT IPs for private virtual datacenters | X | X | X |
...
Manage VPNs | MANAGE_VPN | This privilege allows a user to manage VPNs | X | X |
...
Manage classic firewalls | MANAGE_CLASSIC_FIREWALLS | This privilege allows a user to manage classic firewalls (edit and delete) for devices | X |
...
Manage private IP reservations | MANAGE_PRIVATEIP_RESERVATION | This privilege allows a user to manage private IP reservations | X |
...
Manage default virtual datacenter firewall | MANAGE_DEFAULT_FIREWALL | This privilege allows a user to define a default virtual datacenter firewall |
...
X
...
X | |||||
Manage enterprise datacenter default roles | VDC_MANAGE_DEFAULT_ROLE | This privilege allows a user to manage enterprise datacenter default roles (creation/edition) | X |
...
...
Access public network tab | VDC_VIEW_PUBLIC_NETWORK | This privilege gives the user access to public network resources in virtual infrastructure | X | X | X | X |
...
Manage public network elements | VDC_MANAGE_PUBLIC_NETWORK | This privilege allows a user to manage public network resources in virtual infrastructure | X | X | X | X |
...
Access external network tab | VDC_VIEW_EXTERNAL_NETWORK | This privilege gives the user access to external network resources in virtual infrastructure | X | X | X | X |
...
Manage external network elements | VDC_MANAGE_EXTERNAL_NETWORK | This privilege allows a user to manage external network resources in virtual infrastructure | X | X | X | X |
...
Manage availability sets | MANAGE_AVAILABILITY_SET | This privilege allows a user to manage availability sets (add and delete) for virtual datacenters | X | X |
...
Assign availability set to VM | ASSIGN_AVAILABILITY_SET | This privilege allows a user to assign availability sets to virtual machine (create and edit VM) | X | X |
...
...
Manage the bandwidth limit for NAT | MANAGE_BANDWIDTHLIMIT_NAT | This privilege allows a user to manage the bandwidth limit for NAT | X |
...
Manage the bandwidth limit for public IPs | MANAGE_BANDWIDTHLIMIT_PUBLIC | This privilege allows a user to manage the bandwidth limit for public IPs | X |
...
...
Manage resource groups | MANAGE_RESOURCE_GROUP | This privilege allows a user to create resource groups | X | X | X |
...
...
Delete resource groups | DELETE_RESOURCE_GROUP | This privilege allows a user to delete resource groups | X | X | X |
...
Manage global networks | MANAGE_GLOBAL_NETWORK | This privilege allows a user to manage global networks | X | X | X |
...
Update private MAC IP | UPDATE_MAC_IP | This privilege allows a user to update private MAC IP | X | ||||
Virtual appliances privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
|---|---|---|---|---|---|---|---|
Edit virtual appliance details | VAPP_CUSTOMISE_SETTINGS | This privilege allows a user to edit virtual appliance details (name, CPUs, etc.), go inside virtual appliances and view their details | X | X | X |
...
Deploy and undeploy virtual appliances | VAPP_DEPLOY_UNDEPLOY | This privilege allows a user to deploy/undeploy virtual appliances | X | X | X |
...
Perform virtual machine actions | VAPP_PERFORM_ACTIONS | This privilege allows a user to perform virtual machine actions (power on/off, pause, reboot, remote access) | X | X | X |
...
Create instance | VAPP_CREATE_INSTANCE | This privilege allows a user to create instance templates of a virtual machine within a virtual appliance | X | X | X | ||
Manage virtual machine hard disks | MANAGE_HARD_DISKS | This privilege allows a user to access the virtual machine hard disk tab and manage hard disks (add and delete) | X | X | |||
Manage layers | VAPP_MANAGE_LAYERS | This privilege allows a user to manage |
...
anti-affinity layers in virtual appliances (create |
...
, edit and delete |
...
layers) | X | X | X |
...
Manage virtual machine backup configuration | VAPP_ |
...
MANAGE_ |
...
BACKUP | This privilege allows a user to |
...
X
...
X
...
X
...
access the backup configuration at virtual machine level and set the backup type and contents | X | ||||||
Manage virtual machine backup schedule | VAPP_DEFINE_BACKUP_INFO | This privilege allows a user to specify an additional option for backup configuration by setting backup dates and times | X | ||||
Delete unknown virtual machines | VAPP_DELETE_UNKNOWN_VM | This privilege allows a user to |
...
delete virtual machines in unknown state | X |
...
X
...
Assign firewalls to virtual machines | ASSIGN_FIREWALLS | This privilege allows a user |
...
to assign already created firewalls to virtual machines | X | X |
...
X
...
...
Manage virtual machine backup |
...
disks | VAPP_MANAGE_BACKUP_DISKS | This privilege allows a user to |
...
specify disks and disk backup types (snapshot and complete) | X |
...
X |
...
Assign load balancers | ASSIGN_LOADBALANCERS | This privilege allows a user to |
...
assign load balancers | X |
...
X | |||
Manage virtual machine metrics | USERS_ENABLE_DISABLE_VM_METRICS | This privilege allows a user to |
...
activate monitoring of virtual machines | X | X |
...
X |
...
Access metrics | USERS_SHOW_METRICS | This privilege allows a user to |
...
manage monitoring | X |
...
X |
...
X |
...
X | ||
Restore virtual machine backups | VAPP_RESTORE_BACKUP | This privilege allows a user to |
...
restore virtual machine backups | X | X |
...
Protect/unprotect virtual machines | VM_PROTECT_ACTION | This privilege allows a user to |
...
protect/unprotect a virtual machine |
...
X |
...
X
...
X
...
Consume virtual appliance specs | CONSUME_VAPP_SPEC | This privilege allows a user to |
...
consume virtual appliance specs | X |
...
X
...
Override virtual machine constraints | VM_EXCEED_CPU_RAM | This privilege allows |
...
X
...
X
...
a user to modify virtual machine CPU and RAM to values outside the maximum and minimum values defined in the virtual machine template | X | ||||
Edit virtual machine details | VM_EDIT_CPU_RAM | This privilege allows a user to |
...
edit virtual machine details (CPU and RAM) | X | X | X |
...
Retrieve default template credentials | VM_CHECK_USER_PASSWORD | This privilege allows a user to |
...
X
...
retrieve the default user and password of a template | X |
...
X
...
Relocate a VM to a compatible host | VM_RELOCATE | This privilege allows a user |
...
to relocate a VM to a compatible host | X |
...
X
...
Attach NICs in restricted networks to VMs | VM_ATTACH_NIC | This privilege allows a user to |
...
X
...
attach NICs in restricted networks | X | ||||
Detach NICs in restricted networks from VMs | VM_DETACH_NIC | This privilege allows a user to |
...
detach NICs in restricted networks | X |
...
Manage scaling groups | MANAGE_SCALING_GROUPS | This privilege allows a user to |
...
X
...
manage scaling groups (add, edit and delete) | X | ||||
Manage virtual machine ISO disks | MANAGE_ISO | This privilege allows a user to |
...
manage ISO disks in virtual machines (add, edit and delete) | X |
...
X
...
X
...
Manage restricted VApps and VMs | VAPP_RESTRICTED_MANAGE | This privilege allows a user to manage restricted VApps and VMs | X | ||||
View restricted VApps and VMs | VAPP_RESTRICTED_VIEW | This privilege allows a user to |
...
X
...
view restricted VApps and VMs | X | ||||
Restrict VM | VM_ |
...
RESTRICT | This privilege allows a user to |
...
restrict VMs | X |
...
Move VMs | MANAGE_MOVE_VM | This privilege allows a user to move VMs between VDCs | X | ||||
Retrieve virtual machine initial password | VM_RETRIEVE_INITIAL_PASSWORD | This privilege allows a user to |
...
X
...
retrieve the initial password of a virtual machine | X | ||||
Assign public IPs to VMs | VM_ |
...
ASSIGN_PUBLIC_ |
...
IP | This privilege allows a user |
...
to assign public IPs to VMs | X |
...
X |
...
X |
...
X | |
Assign external IPs to VMs | VM_ASSIGN_ |
...
EXTERNAL_ |
...
IP | This privilege allows a user |
...
to assign external IPs to VMs | X |
...
X |
...
X |
...
X | ||
Reset VM guest password | VM_RESET_GUEST_PASSWORD | This privilege allows |
...
X
...
a user to reset the initial password of a virtual machine | X | ||||
Manage VM disaster recovery protection | VM_MANAGE_DRAAS | This privilege allows a user to |
...
enable or disable disaster recovery protection for VMs | X |
...
X | |||
Manage VM snapshots | MANAGE_SNAPSHOT | This privilege allows a user to |
...
create, delete, and revert VM snapshots | X |
...
X | |||
View enterprise snapshots list | VIEW_ENTERPRISE_SNAPSHOTS_LIST | This privilege allows a user to view |
...
the enterprise’s VM snapshots list | X |
...
X | |||
Manage snapshot auto delete function | USERS_ENABLE_DISABLE_SNAPSHOT_AUTODELETE | This privilege allows a user to |
...
enable snapshot auto deletion | X |
...
X | |||
Manage snapshot auto delete expiration date | USERS_MANAGE_SNAPSHOT_AUTODELETE | This privilege allows a user to |
...
specify the snapshot auto deletion expire date | X | X | |||
Catalogue privileges |
|
|
|
|
...
X
...
X
...
X
...
X
...
X
...
X
...
X
...
X
...
X
...
|
|
| |||||
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
|---|---|---|---|---|---|---|---|
Access Catalogue view | APPLIB_VIEW | This privilege allows a user to |
...
access the Catalogue view | X |
...
X | |||
Manage VM templates from Catalogue | APPLIB_ALLOW_MODIFY | This privilege allows a user to |
...
X
...
X
...
Apps library privileges
...
GUI Label _________________
...
Application Tag
...
Privilege____________________________________
...
Cloud Admin
...
Ent Admin
...
Ent User
...
Ent Viewer
...
Info
...
view the Catalogue contents, modify virtual machine templates (download from remote repositories, edit and delete) and promote instances | X | X | |||||
Upload virtual machine template | APPLIB_UPLOAD_IMAGE | This privilege allows a user to upload virtual machine templates from a local file into the Catalogue | X | X | |||
Manage repository | APPLIB_MANAGE_REPOSITORY | This privilege allows a user to manage repositories (add and delete repositories) | X | X | |||
Download virtual machine template | APPLIB_DOWNLOAD_IMAGE | This privilege allows a user to |
...
download virtual machine templates from the Catalogue to their hard disk | X | X |
...
...
Manage VM |
...
template categories | APPLIB_ |
...
MANAGE_ |
...
CATEGORIES | This privilege allows a user to |
...
manage categories of virtual machine templates |
...
that belong to their enterprise (add and delete) |
...
X | X |
...
Manage VM template global categories | APPLIB_ |
...
MANAGE_GLOBAL_ |
...
CATEGORIES | This privilege allows a user to |
...
X
...
X
...
manage categories of virtual machine templates that are common and available to all enterprises (add and delete) | X | ||||
Display datacenter capacity and free space | APPLIB_SHOW_DC_CAPACITY | This privilege allows a user to |
...
X
...
X
...
view the capacity and remaining space of a datacenter | X | ||||
Export a virtual machine template to datacenter | APPLIB_EXPORT_ |
...
TO_ |
...
PRIVATE | This privilege allows a user to |
...
export a virtual machine |
...
X
...
X
...
template to another private datacenter. | X | ||||
Export a virtual machine template to public cloud region | APPLIB_EXPORT_TO_PUBLIC | This privilege allows a user to |
...
export a virtual machine |
...
template to another public cloud region. | X |
...
X
...
Manage virtual appliance specs | MANAGE_VAPP_SPEC | This privilege allows a user to manage |
...
virtual appliance specs (add and |
...
edit) | X |
...
Download VM templates from remote repository | APPLIB_DOWNLOAD_FROM_REMOTE_REPOSITORY | This privilege allows a user to |
...
download virtual machine templates from remote repositories | X |
...
X | |||
Specify allocation of template disks | APPLIB_ |
...
DISK_ |
...
ALLOCATION | This privilege allows a user to |
...
specify the allocation of template disks | X |
...
Accept virtual machine template |
...
terms of use | APPLIB_ |
...
ACCEPT_ |
...
IMAGE_ |
...
TERMS | This privilege allows a user to |
...
accept virtual machine template |
...
terms of use | X |
...
X | |||
Manage script templates | MANAGE_ |
...
SCRIPT_ |
...
TEMPLATES | This privilege allows a user to manage |
...
script templates (add, edit and |
...
delete) | X | ||||||
Add a script template to a virtual machine template | SCRIPT_TEMPLATE_ATTACH_TO_APPLIB | This privilege allows a user attach an script template to a virtual machine template | X | ||||
Users privileges |
|
|
|
|
|
|
...
X
...
X
...
| |||||||
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
|---|---|---|---|---|---|---|---|
Access Users view | USERS_VIEW | This privilege allows a user to |
...
access the Users view | X |
...
X |
...
Manage enterprises | USERS_MANAGE_ENTERPRISE | This privilege allows a user to |
...
X
...
X
...
Users privileges
...
GUI Label _________________
...
Application Tag
...
Privilege____________________________________
...
Cloud Admin
...
Ent Admin
...
Ent User
...
Ent Viewer
...
Info
...
X
...
X
...
manage enterprises (add, edit and delete) | X | ||||||
Manage users | USERS_MANAGE_USERS | This privilege allows a user to manage users (add, edit and delete) | X | X | |||
Manage users of all enterprises | USERS_MANAGE_OTHER_ENTERPRISES | This privilege allows a user to manage users of more than one enterprise and move users between enterprises. Without it, the Enterprise list is not shown in Users view | X | ||||
No VDC restriction | USERS_PROHIBIT_VDC_RESTRICTION | Normally a user within an enterprise can have a list of VDCs assigned and these will be the only VDCs that they will be able to display. Setting this privilege exempts a user from having their VDC list restricted and they will be able to display all VDCs in their enterprise | X | X | |||
Access Roles and Scope screens | USERS_VIEW_PRIVILEGES | This privilege allows a user to |
...
access the Roles and Scopes screen | X |
...
Manage roles | USERS_MANAGE_ |
...
ROLES | This privilege allows a user to manage |
...
roles (add, edit and delete roles; modify privileges assigned to roles; assign scopes to roles) | X |
...
X
...
Associate role with enterprise | USERS_MANAGE_ROLES_OTHER_ENTERPRISES | This privilege allows a user to associate a role with any enterprise | X | ||||
Manage global role | USERS_MANAGE_ |
...
SYSTEM_ |
...
ROLES | This privilege allows a user to manage |
...
X
...
X
...
X
...
roles that are common and available to all enterprises, rather than being constrained to a single enterprise | X | ||||||
Display connected users | USERS_ENUMERATE_CONNECTED | This privilege allows a user to display connected users | X | ||||
Define enterprise manager | USERS_DEFINE_AS_MANAGER | This privilege defines a user as an enterprise manager. Enterprise managers receive physical machine notification emails | X | X | |||
Manage Chef enterprises | USERS_MANAGE_CHEF_ENTERPRISE | This privilege allows a user to |
...
enable and manage Chef for enterprises | X |
...
Manage scopes | USERS_MANAGE_ |
...
SCOPES | This privilege allows a user to manage |
...
scopes (add, edit and delete |
...
X
...
scopes) | X | ||||
Manage enterprise reserved servers | USERS_MANAGE_ |
...
RESERVED_ |
...
MACHINES | This privilege allows a user to |
...
X
...
manage reserved servers at enterprise level | X | ||||||
Allow user to push own metrics | USERS_PUSH_METRICS | This privilege allows a user to push their own metrics | X | X | X | ||
Manage provider credentials | USERS_MANAGE_ |
...
CREDENTIALS | This privilege allows a user to manage |
...
X
...
provider credentials (add and delete) | X | ||||
Manage user applications | USERS_MANAGE_APPLICATIONS | This privilege allows a user to |
...
manage applications (add and delete) | X |
...
X
...
X
...
Manage reseller enterprises | ENTERPRISE_MANAGE_RESELLER | This privilege allows a user to manage resellers | X | ||||
Manage key node enterprises | ENTERPRISE_MANAGE_KEY_NODE | This privilege allows a user to manage aggregation nodes | X | ||||
Manage enterprise properties | ENTERPRISE_MANAGE_PROPERTIES | This privilege allows a user to manage enterprise properties | X | ||||
Manage user allowed CIDRs | MANAGE_USER_CIDR_ACCESS | This privilege allows a user to |
...
manage |
...
allowed CIDRs for |
...
users | X |
...
Manage virtual datacenter roles | USERS_MANAGE_ |
...
VDC_ROLES | This privilege allows a user to manage |
...
virtual datacenter roles (select default role, define user exceptions) | X |
...
Manage role and scope allowed CIDRs | MANAGE_ROLE_AND_SCOPE_CIDR_ACCESS | This privilege allows a user to manage |
...
allowed CIDRs for roles and scopes | X |
...
Manage mail server for reseller | ENTERPRISE_MANAGE_ |
...
SERVER_ |
...
This privilege allows a user to manage |
...
server mail for resellers | X |
...
Manage user creation in provider | ENTERPRISE_CREATE_USER_IN_PROVIDER | This privilege allows a user to |
...
manage user creation in a provider (in credentials list) | X | X |
...
X
...
Access user metadata (dashboards) | USERS_VIEW_USERS_METADATA | This privilege allows a user to |
...
access users metadata (dashboards) | X |
...
Manage user |
...
metadata (dashboards) | USERS_MANAGE_USERS_ |
...
METADATA | This privilege allows a user to manage |
...
users metadata (dashboards) | X |
...
Access enterprise metadata (dashboards) | USERS_VIEW_ENTERPRISE_METADATA | This privilege allows a user to |
...
access enterprise metadata (dashboards) | X |
...
...
Manage enterprise metadata (dashboards) | USERS_MANAGE_ |
...
ENTERPRISE_ |
...
METADATA | This privilege allows a user to manage |
...
enterprise metadata (dashboards) | X |
...
Manage default themes | USERS_MANAGE_ |
...
THEMES | This privilege allows |
...
the user to manage |
...
the default theme for the platform (only one will be active) | X |
...
...
Manage reseller themes | USERS_MANAGE_RESELLER_THEMES | This privilege allows |
...
the user to manage |
...
themes for resellers and their customers (only one active) | X |
...
...
Manage theme login configuration | USERS_MANAGE_ |
...
THEME_LOGIN_ |
...
CONFIG | This privilege allows |
...
the user to manage |
...
X
...
the theme login css configuration | X | ||||
Manage organizational units | ORGANIZATIONAL_UNITS_MANAGE | This privilege allows a user to |
...
manage organizational units | X | X | |||
Pricing privileges |
|
|
|
|
...
X
...
|
|
| |||||
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
|---|---|---|---|---|---|---|---|
Access Pricing view | PRICING_VIEW | This privilege allows a user to |
...
X
...
access the Pricing view | X | ||||
Manage pricing | PRICING_MANAGE | This privilege allows a user to manage |
...
pricing components (add, edit and delete currencies, pricing models and extra charges) | X |
...
Manage pricing credentials | MANAGE_PRICING_CREDENTIALS | This privilege allows a user to manage |
...
pricing credentials | X | X |
...
Generate billing | RUN_BILLING | This privilege allows a user to generate billings | X | X | |||
Manage hardware profile extra charges | COST_CODE_MANAGE_HARDWARE_PROFILE | This privilege allows a user to |
...
manage hardware profile extra charges | X |
...
X |
...
Manage |
...
virtual machine extra charges | COST_CODE_MANAGE_ |
...
VIRTUAL_ |
...
MACHINE | This privilege allows a user to manage |
...
virtual machine extra charges | X |
...
X | |||
Manage virtual machine template extra charges | COST_CODE_MANAGE_VIRTUAL_MACHINE_TEMPLATE | This privilege allows a user to |
...
manage virtual machine template extra charges | X |
...
X |
...
View price factors | PRICE_FACTOR_VIEW | This privilege allows a user to |
...
System configuration privileges
...
GUI Label _________________
...
Application Tag
...
Privilege____________________________________
...
Cloud Admin
...
Ent Admin
...
Ent User
...
Ent Viewer
...
Info
...
access the Price factors view | X |
...
Manage price factors | PRICE_FACTOR_MANAGE | This privilege allows a user to manage price factors | X | ||||
Manage enterprise products | COST_CODE_MANAGE_ENTERPRISE | This privilege allows a user to manage enterpirse products | X | X | |||
View enterprise products | COST_CODE_VIEW_ENTERPRISE | This privilege allows a user to view enteprise products | X | X | |||
View hardware profile extra charges | COST_CODE_VIEW_HARDWARE_PROFILE | This privilege allows a user to |
...
view hardware profile extra charges | X |
...
X | |||
View virtual machine extra charges | COST_CODE_VIEW_VIRTUAL_MACHINE | This privilege allows a user to |
...
view virtual machine extra charges | X |
...
X | |||
View virtual machine template extra charges | COST_CODE_VIEW_VIRTUAL_MACHINE_TEMPLATE | This privilege allows a user to |
...
X
...
view virtual machine template extra charges | X | X | |||||
Regenerate billing | PRICING_REGENERATE | This privilege allows a user to regenerate billing for a pricing model | X | X | |||
Remove one-time extra charges from entities | COST_CODE_REMOVE_ONE_TIME | This privilege allows a user to |
...
remove one-time extra charges from entities | X |
...
X | |||||||
Events privileges |
|
|
|
|
|
|
|
...
GUI Label _________________
...
Application Tag
...
GUI Label _________________ | Application Tag | Privilege___________________ |
|---|
...
Cloud Admin
...
Ent Admin
...
Ent User
...
Ent Viewer
...
Info
...
_ |
|---|
...
_ |
|---|
...
_ |
|---|
...
X
...
X
...
X
...
______________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
|---|---|---|---|---|---|
Display all events for current enterprise | EVENTLOG_VIEW_ENTERPRISE | This privilege allows a user |
...
to display all events related to the current enterprise | X | X |
...
X |
...
X |
...
Display all events | EVENTLOG_VIEW_ALL | This privilege allows a user to |
...
display all events | X |
...
X
...
Control privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
|---|---|---|---|---|---|---|---|
Access alarms section | USERS_VIEW_ALARMS | This privilege allows a user to access the alarms sections | X | ||||
Manage alarms | USERS_MANAGE_ALARMS | This privilege allows a user to manage alarms (create, edit and delete) | X | ||||
Access alerts section | USERS_ |
...
Cloud Admin
...
Ent Admin
...
Ent User
...
Ent Viewer
...
Info
...
VIEW_ALERTS | This privilege allows a user to access the alerts sections | X | |||||
Manage alerts | USERS_MANAGE_ALERTS | This privilege allows a user to manage alerts (create, edit and delete) | X | ||||
Access action plans, schedule and alert trigger tabs | ACTION_PLAN_VIEW | This privilege allows a user to |
...
access the Action plans, the Schedule and Alert trigger tabs | X |
...
X
...
X
...
X
...
Manage action plans and task schedules | ACTION_PLAN_MANAGE | This privilege allows a user to |
...
X
...
Control privileges
...
GUI Label _________________
...
Application Tag
...
Privilege____________________________________
...
Cloud Admin
...
Ent Admin
...
Ent User
...
Ent Viewer
...
Info
...
X
...
manage action plans, schedule and alert triggers | X | ||||||
Access budgets section | BUDGET_VIEW | This privilege allows a user to access the budgets section | X | ||||
Manage budgets | BUDGET_MANAGE | This privilege allows a user to manage budgets (create, edit and delete) | X | ||||
View enterprise hierarchy | ENTERPRISE_VIEW_HIERARCHY | This privilege allows the user to display the enterprises in a hierarchy | X | ||||
Access resource tags tabs and resource tags management view | TAGS_VIEW | This privilege allows the user to display the Tags tab of resources and the Tags management view | X | ||||
Manage tags for compatible resources | TAGS_MANAGE | This privilege allows the user to manage tags for compatible resources (add, edit, synchronize and delete) | X | ||||
Access tag policies view | TAG_POLICIES_VIEW | This privilege allows the user to display tag policies view | X | ||||
Manage tag policies | TAG_POLICIES_MANAGE | This privilege allows the user to manage tag policies (add, edit and delete) | X |
...
Manage cost usage report files | USERS_ |
...
MANAGE_COSTUSAGE_REPORTS_FILES | This privilege allows a user to |
...
manage cost usage report files (create, edit and delete) | X |
...
X | |||
Manage cost usage report filters | USERS_MANAGE_ |
...
COSTUSAGE_REPORTS_FILTERS | This privilege allows a user to manage |
...
cost usage report filters (create, edit and delete) | X |
...
X | |||
Schedule to generate cost usage CSV files | USERS_SCHEDULE_COSTUSAGE_REPORTS_FILTERS | This privilege allows a user to |
...
Key to Info Column of Privileges Table
...
generate CSV files of cost usage reports | X | X | |||
System configuration privileges |
|
|
|
|
...
X
...
X
...
X
...
X
...
|
|
| |||||
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
|---|---|---|---|---|---|---|---|
Access Configuration view | SYSCONFIG_VIEW | This privilege allows a user to access the Configuration view | X | ||||
Modify configuration data | SYSCONFIG_ALLOW_MODIFY | This privilege allows a user to edit all system-wide configuration settings | X | ||||
Manage default dashboards | SYSCONFIG_MANAGE_DEFAULT_DASHBOARDS | This privilege allows a user to manage default dashboards | X |
Key to info column of privileges table
= new privilege
= changed privilege
= deprecated privilege