The following table describes all the privileges in the cloud platform.
Info |
---|
Changes to privileges |
...
Home privileges
...
GUI Label _________________
...
Application Tag
...
Privilege____________________________________
...
Cloud Admin
...
Ent Admin
...
Ent User
...
Ent Viewer
...
Info
...
List enterprises within scope
...
ENTERPRISE_ENUMERATE
...
This privilege allows a user to view the list of enterprises within scope and to view statistics for those enterprises
...
X
...
Allow user to switch enterprise
...
ENTERPRISE_ADMINISTER_ALL
...
This privilege allows a user to change to another enterprise, in order to administer it, by clicking the switch user button in the Enterprises list
...
X
...
Display enterprise statistics
...
ENTERPRISE_RESOURCE_SUMMARY_ENT
...
This privilege allows a user to filter statistics by enterprise to display the resources used by an enterprise in the enterprise resources panel
...
X
...
X
...
X
...
Display enterprise limits in statistics
...
ENTERPRISE_SHOW_STATS_LIMITS
...
This privilege allows a user to view enterprise limits in addition to resources used in the enterprise resources panel if the user has the Display enterprise statistics privilege
...
X
...
X
...
X
...
View bills
...
BILLS_VIEW
...
This privilege allows a user to view bills and related widgets
...
X
...
Manage bills
...
BILLS_MANAGE
...
This privilege allows a user to manage bills
...
X
...
Services (XaaS) privileges
...
The following table describes all the privileges in the cloud platform.
Info |
---|
Changes to privileges |
Home privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
---|---|---|---|---|---|---|---|
List enterprises within scope | ENTERPRISE_ENUMERATE | This privilege allows a user to view the list of enterprises within scope and to view statistics for those enterprises | X | ||||
Allow user to switch enterprise | ENTERPRISE_ADMINISTER_ALL | This privilege allows a user to change to another enterprise, in order to administer it, by clicking the switch user button in the Enterprises list | X | ||||
Display enterprise statistics | ENTERPRISE_RESOURCE_SUMMARY_ENT | This privilege allows a user to filter statistics by enterprise to display the resources used by an enterprise in the enterprise resources panel | X | X | X | ||
Display enterprise limits in statistics | ENTERPRISE_SHOW_STATS_LIMITS | This privilege allows a user to view enterprise limits in addition to resources used in the enterprise resources panel if the user has the Display enterprise statistics privilege | X | X | X | ||
View bills | BILLS_VIEW | This privilege allows a user to view bills and related widgets | X | ||||
Manage bills | BILLS_MANAGE | This privilege allows a user to manage bills | X | ||||
Services (XaaS) privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
Use default services | XAAS_USE_DEFAULT | This privilege allows a user to use default services | X | X | |||
Manage default services | XAAS_MANAGE_DEFAULT | This privilege allows a user to manage default services | X | ||||
Use enterprise services | XAAS_USE_ENTERPRISE | This privilege allows a user to use enterprise services | X | X | X | X | |
Manage enterprise services | XAAS_MANAGE_ENTERPRISE | This privilege allows a user to manage enterprise services | X | X | |||
Use user services | XAAS_USE_USER | This privilege allows a user to use user services | X | X | X | X | |
Manage user services | XAAS_MANAGE_USER | This privilege allows a user to manage user services | X | X | X | ||
Use datacenter services | XAAS_USE_DATACENTER | This privilege allows a user to use datacenter services | X | X | X | ||
Manage datacenter services | XAAS_MANAGE_DATACENTER | This privilege allows a user to manage datacenter services | X | ||||
Use public cloud region services | XAAS_USE_PUBLIC_CLOUD_REGION | This privilege allows a user to use public cloud region services | X | X | X | ||
Manage public cloud region services | XAAS_MANAGE_PUBLIC_CLOUD_REGION | This privilege allows a user to manage public cloud region services | X | ||||
Use location services | XAAS_USE_LOCATION | This privilege allows a user to use location services | X | X | X | X | |
Manage location services | XAAS_MANAGE_LOCATION | This privilege allows a user to manage location services | X | X | |||
Use virtual datacenter services | XAAS_USE_VIRTUAL_DATACENTER | This privilege allows a user to use virtual datacenter services | X | X | X | X | |
Manage virtual datacenter services | XAAS_MANAGE_VIRTUAL_DATACENTER | This privilege allows a user to manage virtual datacenter services | X | X | X | ||
Use virtual appliance services | XAAS_USE_VIRTUAL_APPLIANCE | This privilege allows a user to use virtual appliance services | X | X | X | X | |
Manage virtual appliance services | XAAS_MANAGE_VIRTUAL_APPLIANCE | This privilege allows a user to manage virtual appliance services | X | X | X | ||
Use virtual machine services | XAAS_USE_VIRTUAL_MACHINE | This privilege allows a user to use virtual machine services | X | X | X | X | |
Manage virtual machine services | XAAS_MANAGE_VIRTUAL_MACHINE | This privilege allows a user to manage virtual machine services | X | X | X | ||
Run actions on usable services | XAAS_EXECUTE | This privilege allows a user to run actions on the services they can use | X | X | X | ||
Infrastructure privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege |
_____________________________ |
---|
Cloud Admin
Ent Admin
Ent User
Ent Viewer
Info
Use default services
XAAS_USE_DEFAULT
This privilege allows a user to use default services
X
X
Manage default services
XAAS_MANAGE_DEFAULT
This privilege allows a user to manage default services
X
Use enterprise services
XAAS_USE_ENTERPRISE
This privilege allows a user to use enterprise services
X
X
X
X
Manage enterprise services
_______ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
---|---|---|---|---|---|
Access infrastructure view and private DCs | PHYS_DC_ENUMERATE | This privilege allows a user to |
access the Infrastructure view and list the physical datacenters | X |
X
Use user services
Display resource usage panel | PHYS_DC_RETRIEVE_RESOURCE_USAGE | This privilege allows a user to |
X
view the resource usage panel in the Infrastructure view | X |
X
Manage |
datacenter | PHYS_DC_MANAGE |
This privilege allows a user to manage |
X
datacenters (add, edit and delete). Without it, the datacenter's properties will be read only | X |
View datacenter |
details |
PHYS_DC_ |
RETRIEVE_ |
DETAILS | This privilege allows a user to |
X
go inside a datacenter and view its details (racks, physical machines, networks, storage and allocation rules) | X | ||||
Manage datacenter |
infrastructure elements |
PHYS_ |
This privilege allows a user to manage datacenter services
X
Use public cloud region services
DC_ALLOW_MODIFY_SERVERS | This privilege allows a user to |
Manage public cloud region services
manage infrastructure elements (add, edit and delete racks and physical machines) | X |
X
X
Manage network elements | PHYS_DC_ALLOW_MODIFY_NETWORK | This privilege allows a user to manage |
network elements (add, edit and delete public networks) | X |
Use location services
Manage storage elements | PHYS_DC_ALLOW_MODIFY_STORAGE | This privilege allows a user to |
X
X
manage storage elements (add, edit and delete storage devices, pools, tiers and volumes) | X | ||||
Manage |
allocation rules | PHYS_DC_ALLOW_MODIFY_ALLOCATION | This privilege allows a user to manage |
allocation rules (add and delete rules) | X |
X
Use virtual datacenter services
Manage datacenter backup configuration | PHYS_DC_ALLOW_BACKUP_CONFIG | This privilege allows a user to |
manage backup configuration at datacenter level | X |
X
Manage devices | MANAGE_DEVICES | This privilege allows a user to setup networking devices (Neutron) | X | ||||
Manage |
public cloud regions | PCR_MANAGE |
This privilege allows a user to manage |
Use virtual appliance services
public cloud regions (add, edit and delete). Without it, the public cloud region's properties will be read only | X |
X
X
Access infrastructure view and PCRs | PCR_ENUMERATE | This privilege allows a user to |
access the Infrastructure view and list the public cloud regions | X |
X
X
X
Manage virtual appliance services
View public cloud region details | PCR_RETRIEVE_DETAILS | This privilege allows a user to |
Use virtual machine services
go inside a public cloud region and view its details (virtual machines and hardware profiles) | X |
X
X
Manage hardware profile types and family | MANAGE_HARDWARE_PROFILE_TYPE_AND_FAMILY | This privilege allows |
the user to manage hardware profile types and family (add, edit and delete) | X |
X
X
X
Manage virtual machine services
View and manage protection managers | MANAGE_DRAAS_CONFIG | This privilege allows |
the user to manage |
protection managers for disaster recovery (create, edit and delete) | X |
Run actions on usable services
XAAS_EXECUTE
This privilege allows a user to run actions on the services they can use
X
X
X
Infrastructure privileges
GUI Label _________________
Application Tag
Virtual datacenters privileges |
X
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege__________________ |
---|
Cloud Admin
Ent Admin
Ent User
Ent Viewer
Info
Access infrastructure view and private DCs
_ |
---|
_ |
---|
This privilege allows a user to access the Infrastructure view and list the physical datacenters
X
Display resource usage panel
_ |
---|
_ |
---|
_ |
---|
This privilege allows a user to view the resource usage panel in the Infrastructure view
X
Manage datacenter
PHYS_DC_MANAGE
This privilege allows a user to manage datacenters (add, edit and delete). Without it, the datacenter's properties will be read only
X
View datacenter details
PHYS_DC_RETRIEVE_DETAILS
This privilege allows a user to go inside a datacenter and view its details (racks, physical machines, networks, storage and allocation rules)
X
Manage datacenter infrastructure elements
_____________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
---|---|---|---|---|---|
Access virtual datacenters view | VDC_ENUMERATE | This privilege allows a user to |
access the Virtual Datacenters view | X | X | X | X | |
Manage |
virtual datacenters |
VDC_MANAGE | This privilege allows a user to manage |
virtual datacenters (add, edit and delete |
). Without it, the virtual datacenter details are read only | X | X | |||
Manage |
virtual appliances |
VDC_ |
MANAGE_VAPP | This privilege allows a user to manage |
virtual appliances (add, edit and delete |
) | X |
Manage allocation rules
X | X | ||
Manage virtual network elements | VDC_MANAGE_NETWORK | This privilege allows a user to manage |
private and public networks (add, edit and delete |
) | X |
Manage datacenter backup configuration
X | |||
Manage virtual storage elements | VDC_MANAGE_STORAGE | This privilege allows a user to manage |
storage volumes (add, edit and delete) | X | X | |||
Manage |
floating IPs | MANAGE_ |
FLOATINGIPS | This privilege allows a user to |
manage floating IPs (add and delete) | X | X | |||
Manage |
firewalls |
MANAGE_ |
FIREWALLS | This privilege allows a user to manage |
firewalls (add, edit and delete) |
X
Access infrastructure view and PCRs
PCR_ENUMERATE
This privilege allows a user to access the Infrastructure view and list the public cloud regions
X
View public cloud region details
for virtual datacenters | X | X | |||
Manage load balancers | MANAGE_LOADBALANCERS | This privilege allows a user to |
manage load balancers (add, edit and delete) for virtual datacenters | X |
Manage hardware profile types and family
X | |||
Manage virtual storage controller | VDC_MANAGE_STORAGE_CONTROLLER | This privilege allows |
a user to manage |
X
View and manage protection managers
the controller of storage volumes | X | X | X | ||
Manage public IPs | MANAGE_PUBLICIPS | This privilege allows |
a user to manage |
GUI Label _________________
Application Tag
Privilege____________________________________
Cloud Admin
Ent Admin
Ent User
Ent Viewer
Info
Access virtual datacenters view
public IPs for private virtual datacenters | X |
Virtual datacenters privileges
X | X | ||||||
Modify allocation when attaching a disk | VDC_MANAGE_STORAGE_DISK_ALLOCATION | This privilege allows a user to modify the allocation of disks before they are deployed to the hypervisor and specify allocation when attaching a new disk and it is not possible once the VM is deployed (disk already created/copied) | X | ||||
Manage NAT IPs | MANAGE_NATIPS | This privilege allows a user to |
manage NAT IPs for private virtual datacenters | X | X | X |
X
Manage |
VPNs |
MANAGE_ |
VPN | This privilege allows a user to manage |
VPNs | X | X | |||
Manage |
classic firewalls |
MANAGE_ |
CLASSIC_ |
FIREWALLS | This privilege allows a user to manage |
classic firewalls ( |
edit and delete) |
X
for devices | X | ||||
Manage |
private IP reservations | MANAGE_PRIVATEIP_RESERVATION | This privilege allows a user to manage private |
IP reservations | X | ||||
Manage default virtual |
datacenter firewall |
MANAGE_ |
DEFAULT_ |
FIREWALL | This privilege allows a user to |
Manage floating IPs
define a default virtual datacenter firewall | X |
X
Manage enterprise datacenter default roles | VDC_MANAGE_DEFAULT_ROLE | This privilege allows a user to manage |
enterprise datacenter default roles (creation/edition) | X |
X
Manage firewalls
Access public network tab | VDC_VIEW_PUBLIC_NETWORK | This privilege |
gives the user |
access to public network resources in virtual infrastructure | X | X | X | X | |
Manage |
public network elements | VDC_MANAGE_ |
PUBLIC_NETWORK | This privilege allows a user to manage |
public network resources in virtual infrastructure | X | X | X | X |
Access external network tab | VDC_ |
VIEW_ |
EXTERNAL_ |
NETWORK | This privilege |
gives the user |
access to external network resources in virtual infrastructure | X | X | X | X | |
Manage |
external network elements | VDC_MANAGE_EXTERNAL_NETWORK | This privilege allows a user to manage |
external network resources in virtual infrastructure | X | X | X | X |
Modify allocation when attaching a disk
Manage availability sets | MANAGE_ |
AVAILABILITY_ |
SET | This privilege allows a user to |
X
Manage NAT IPs
manage availability sets (add and delete) for virtual datacenters | X | X | |||
Assign availability set to VM | ASSIGN_AVAILABILITY_SET | This privilege allows a user to |
assign availability sets to virtual machine (create and edit VM) | X | X |
X
Manage the bandwidth limit for NAT | MANAGE_ |
BANDWIDTHLIMIT_NAT | This privilege allows a user to manage |
the bandwidth limit for NAT | X | ||||
Manage |
the bandwidth limit for public IPs | MANAGE_ |
BANDWIDTHLIMIT_ |
PUBLIC | This privilege allows a user to manage |
the bandwidth limit for public IPs | X | ||||
Manage |
resource groups | MANAGE_ |
RESOURCE_ |
GROUP | This privilege allows a user to |
create resource groups | X | X | X |
Manage default virtual datacenter firewall
Delete resource groups | DELETE_RESOURCE_GROUP | This privilege allows a user to |
delete resource groups | X | X | X | ||
Manage |
global networks | MANAGE_ |
GLOBAL_ |
NETWORK | This privilege allows a user to manage |
global networks | X | X | X |
Access public network tab
Update private MAC IP | UPDATE_MAC_IP | This privilege |
allows a user |
Manage public network elements
VDC_MANAGE_PUBLIC_NETWORK
This privilege allows a user to manage public network resources in virtual infrastructure
X
X
X
X
Access external network tab
VDC_VIEW_EXTERNAL_NETWORK
This privilege gives the user access to external network resources in virtual infrastructure
X
X
X
X
Manage external network elements
VDC_MANAGE_EXTERNAL_NETWORK
to update private MAC IP | X |
X
X
X
Virtual appliances privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
---|---|---|---|---|---|---|---|
Edit virtual appliance details | VAPP_CUSTOMISE_SETTINGS | This privilege allows a user to edit virtual appliance details (name, CPUs, etc.), go inside virtual appliances and view their details | X | X | X |
X
Manage availability sets
Deploy and undeploy virtual appliances | VAPP_DEPLOY_UNDEPLOY | This privilege allows a user to |
deploy/undeploy virtual appliances | X | X | X |
Assign availability set to VM
Perform virtual machine actions | VAPP_PERFORM_ACTIONS | This privilege allows a user to |
perform virtual machine |
actions (power on/off, pause, reboot, remote access) | X | X | X |
Manage the bandwidth limit for NAT
Create instance | VAPP_CREATE_INSTANCE | This privilege allows a user to |
X
Manage the bandwidth limit for public IPs
MANAGE_BANDWIDTHLIMIT_PUBLIC
create instance templates of a virtual machine within a virtual appliance | X | X | X | ||
Manage |
virtual machine hard disks | MANAGE_ |
HARD_ |
DISKS | This privilege allows a user |
Delete resource groups
to access the virtual machine hard disk tab and manage hard disks (add and delete) | X | X |
X
Manage layers | VAPP_MANAGE_LAYERS | This privilege allows a user to |
manage anti-affinity layers in virtual appliances (create, edit and delete layers) | X | X | X | ||
Manage |
virtual machine backup configuration | VAPP_MANAGE_ |
BACKUP | This privilege allows a user to |
access the backup configuration at virtual machine level and set the backup type and contents | X |
X
X
Update private MAC IP
Manage virtual machine backup schedule | VAPP_DEFINE_BACKUP_INFO | This privilege allows a user to |
X
Virtual appliances privileges
GUI Label _________________
Application Tag
Privilege____________________________________
Cloud Admin
Ent Admin
Ent User
Ent Viewer
Info
Edit virtual appliance details
specify an additional option for backup configuration by setting backup dates and times | X | ||||
Delete unknown virtual machines | VAPP_DELETE_UNKNOWN_VM | This privilege allows a user to |
X
X
X
Deploy and undeploy virtual appliances
delete virtual machines in unknown state | X | ||||
Assign firewalls to virtual machines | ASSIGN_FIREWALLS | This privilege allows a user |
to assign already created firewalls to virtual machines | X | X |
X
Manage virtual machine |
backup disks | VAPP_ |
MANAGE_BACKUP_ |
DISKS | This privilege allows a user to |
Manage persistent templates
specify disks and disk backup types (snapshot and complete) | X | X |
X
Assign load balancers | ASSIGN_LOADBALANCERS | This privilege allows a user to |
assign load balancers | X | X | |||
Manage virtual machine metrics | USERS_ENABLE_DISABLE_VM_METRICS | This privilege allows a user to activate monitoring of virtual machines | X | X | X |
Access metrics |
USERS_ |
SHOW_ |
METRICS | This privilege allows a user to |
manage monitoring | X | X | X | X |
Restore virtual machine |
backups |
VAPP_ |
RESTORE_ |
BACKUP | This privilege allows a user to |
X
X
Manage layers
restore virtual machine backups | X | X | |||||
Protect/unprotect virtual machines | VM_PROTECT_ACTION | This privilege allows a user to protect/unprotect a virtual machine | X | ||||
Consume virtual appliance specs | CONSUME_VAPP_SPEC | This privilege allows a user to |
consume virtual appliance specs | X |
X
X
Override virtual machine |
constraints | VM_EXCEED_CPU_RAM | This privilege allows a user to |
modify virtual machine |
CPU and RAM to values outside the maximum and minimum values defined in the virtual machine template | X |
Edit virtual machine |
details |
VM_ |
EDIT_ |
CPU_ |
RAM | This privilege allows a user to |
X
Manage workflow tasks
WORKFLOW_OVERRIDE
This privilege allows a user to start or cancel queued tasks if workflow is enabled
X
X
Delete unknown virtual machines
VAPP_DELETE_UNKNOWN_VM
This privilege allows a user to delete virtual machines in unknown state
X
Assign firewalls to virtual machines
edit virtual machine details (CPU and RAM) | X | X | X | ||||
Retrieve default template credentials | VM_CHECK_USER_PASSWORD | This privilege allows a user to retrieve the default user and password of a template | X | ||||
Relocate a VM to a compatible host | VM_RELOCATE | This privilege allows a user to |
Access persistent templates view
relocate a VM to a compatible host | X |
X
Attach NICs in restricted networks to VMs | VM_ATTACH_NIC | This privilege allows a user to |
X
attach NICs in restricted networks | X | ||||||
Detach NICs in restricted networks from VMs | VM_DETACH_NIC | This privilege allows a user to detach NICs in restricted networks | X | ||||
Manage |
scaling groups | MANAGE_ |
SCALING_ |
GROUPS | This privilege allows a user to |
Assign load balancers
manage scaling groups (add, edit and delete) | X |
X
Manage virtual machine ISO disks | MANAGE_ISO | This privilege allows a user to |
manage ISO disks in virtual machines (add, edit and delete) | X |
X
Manage virtual machine metrics
Manage restricted VApps and VMs | VAPP_RESTRICTED_MANAGE | This privilege allows a user to |
Access metrics
manage restricted VApps and VMs | X |
X
X
View restricted VApps and VMs | VAPP_RESTRICTED_VIEW | This privilege allows a user to |
view restricted VApps and VMs | X |
X
X
X
Restore virtual machine backups
Restrict VM | VM_RESTRICT | This privilege allows a user to |
restrict VMs | X |
X
Protect/unprotect virtual machines
Move VMs | MANAGE_MOVE_VM | This privilege allows |
a user to move VMs between VDCs | X |
Consume virtual appliance specs
Retrieve virtual machine initial password | VM_RETRIEVE_INITIAL_PASSWORD | This privilege allows a user to |
retrieve the initial password of a virtual machine | X |
Assign public IPs to VMs | VM_ |
ASSIGN_ |
PUBLIC_ |
IP | This privilege allows a user to |
X
Edit virtual machine details
assign public IPs to VMs | X | X | X | X | |
Assign external IPs to VMs | VM_ASSIGN_EXTERNAL_IP | This privilege allows a user to |
assign external IPs to VMs | X | X | X | X |
Reset VM guest password | VM_ |
RESET_ |
GUEST_PASSWORD | This privilege allows a user to |
reset the |
initial password of a |
virtual machine | X |
Relocate a VM to a compatible host
VM_RELOCATE
This privilege allows a user to relocate a VM to a compatible host
X
Manage workflow for scaling groups
Manage VM disaster recovery protection | VM_MANAGE_ |
DRAAS | This privilege allows a user to enable or disable |
disaster recovery protection for VMs | X |
Attach NICs in restricted networks to VMs
X | |||
Manage VM snapshots | MANAGE_SNAPSHOT | This privilege allows a user to |
X
Detach NICs in restricted networks from VMs
create, delete, and revert VM snapshots | X | X | |||
View enterprise snapshots list | VIEW_ENTERPRISE_SNAPSHOTS_LIST | This privilege allows a user to |
view the enterprise’s VM snapshots list | X | X | |||
Manage |
snapshot auto delete function | USERS_ENABLE_DISABLE_SNAPSHOT_AUTODELETE | This privilege allows a user to |
enable snapshot auto deletion | X | X | |||
Manage |
snapshot auto delete expiration date | USERS_MANAGE_SNAPSHOT_AUTODELETE | This privilege allows a user to |
X
Manage restricted VApps and VMs
VAPP_RESTRICTED_MANAGE
This privilege allows a user to manage restricted VApps and VMs
X
View restricted VApps and VMs
VAPP_RESTRICTED_VIEW
This privilege allows a user to view restricted VApps and VMs
X
Restrict VM
VM_RESTRICT
This privilege allows a user to restrict VMs
X
Move VMs
MANAGE_MOVE_VM
This privilege allows a user to move VMs between VDCs
X
Retrieve virtual machine initial password
specify the snapshot auto deletion expire date | X | X | |||||
Catalogue privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
---|---|---|---|---|---|---|---|
Access Catalogue view | APPLIB_VIEW | This privilege allows a user to |
access the Catalogue view | X |
X |
Manage VM templates from Catalogue | APPLIB_ALLOW_MODIFY | This privilege allows a user to |
Assign external IPs to VMs
view the Catalogue contents, modify virtual machine templates (download from remote repositories, edit and delete) and promote instances | X | X |
X
X
Upload virtual machine template | APPLIB_UPLOAD_IMAGE | This privilege allows a user to |
upload virtual machine templates from a local file into the Catalogue | X | X |
X
X
Reset VM guest password
Manage repository | APPLIB_MANAGE_REPOSITORY | This privilege allows a user to |
X
Manage VM disaster recovery protection
manage repositories (add and delete repositories) | X | X | |||
Download virtual machine template | APPLIB_DOWNLOAD_IMAGE | This privilege allows a user |
to download virtual machine templates from the Catalogue to their hard disk | X | X | |||
Manage VM |
template categories | APPLIB_MANAGE_ |
CATEGORIES | This privilege allows a user |
to manage categories of virtual machine templates that belong to their enterprise (add and delete) | X | X |
View enterprise snapshots list
Manage VM template global categories | APPLIB_MANAGE_GLOBAL_CATEGORIES | This privilege allows a user |
X
X
Manage snapshot auto delete function
to manage categories of virtual machine templates that are common and available to all enterprises (add and delete) | X | ||||
Display datacenter capacity and free space | APPLIB_SHOW_DC_CAPACITY | This privilege allows a user to |
X
X
Manage snapshot auto delete expiration date
view the capacity and remaining space of a datacenter | X | ||||
Export a virtual machine template to datacenter | APPLIB_EXPORT_TO_PRIVATE | This privilege allows a user |
X
X
Catalogue privileges
GUI Label _________________
Application Tag
Privilege____________________________________
Cloud Admin
Ent Admin
Ent User
Ent Viewer
Info
Access Catalogue view
to export a virtual machine template to another private datacenter. | X | ||||||
Export a virtual machine template to public cloud region | APPLIB_EXPORT_TO_PUBLIC | This privilege allows a user to export a virtual machine template to another public cloud region. | X | ||||
Manage virtual appliance specs | MANAGE_VAPP_SPEC | This privilege allows a user to manage virtual appliance specs (add and edit) | X | ||||
Download VM templates from remote repository | APPLIB_DOWNLOAD_FROM_REMOTE_REPOSITORY | This privilege allows a user to |
download virtual machine templates from remote repositories | X | X |
Specify allocation of template disks | APPLIB_ |
DISK_ |
ALLOCATION | This privilege allows a user to |
specify the allocation of template disks | X |
X
Accept virtual machine template terms of use | APPLIB_ |
ACCEPT_IMAGE_TERMS | This privilege allows a user to |
accept virtual machine |
template terms of use | X | X | |||
Manage |
script templates |
MANAGE_ |
SCRIPT_ |
TEMPLATES | This privilege allows a user to manage |
script templates (add, edit and delete |
) | X |
X
Add a script template to a virtual machine template |
SCRIPT_ |
This privilege allows a user to download virtual machine templates from the Catalogue to their hard disk
X
X
Manage VM template categories
TEMPLATE_ATTACH_TO_APPLIB | This privilege allows a user |
X
X
Manage VM template global categories
APPLIB_MANAGE_GLOBAL_CATEGORIES
This privilege allows a user to manage categories of virtual machine templates that are common and available to all enterprises (add and delete)
X
Display datacenter capacity and free space
APPLIB_SHOW_DC_CAPACITY
This privilege allows a user to view the capacity and remaining space of a datacenter
X
Export a virtual machine template to datacenter
attach an script template to a virtual machine template | X | ||||||
Users privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
---|---|---|---|---|---|---|---|
Access Users view | USERS_VIEW | This privilege allows a user to |
X
Export a virtual machine template to public cloud region
access the Users view | X | X | |||
Manage enterprises | USERS_MANAGE_ENTERPRISE | This privilege allows a user to |
manage enterprises (add, edit and delete) | X | ||||
Manage |
users | USERS_MANAGE_ |
USERS | This privilege allows a user to manage |
users (add, edit and |
delete) | X |
Download VM templates from remote repository
X | |||
Manage users of all enterprises | USERS_MANAGE_OTHER_ENTERPRISES | This privilege allows a user to |
X
X
Specify allocation of template disks
APPLIB_DISK_ALLOCATION
This privilege allows a user to specify the allocation of template disks
X
Accept virtual machine template terms of use
manage users of more than one enterprise and move users between enterprises. Without it, the Enterprise list is not shown in Users view | X | ||||||
No VDC restriction | USERS_PROHIBIT_VDC_RESTRICTION | Normally a user within an enterprise can have a list of VDCs assigned and these will be the only VDCs that they will be able to display. Setting this privilege exempts a user from having their VDC list restricted and they will be able to display all VDCs in their enterprise | X | X | |||
Access Roles and Scope screens | USERS_VIEW_PRIVILEGES | This privilege allows a user to |
Users privileges
GUI Label _________________
Application Tag
Privilege____________________________________
Cloud Admin
Ent Admin
Ent User
Ent Viewer
Info
Access Users view
access the Roles and Scopes screen | X |
X
Manage roles | USERS_MANAGE_ROLES | This privilege allows a user to manage roles (add, edit and delete roles; modify privileges assigned to roles; assign scopes to roles) | X | ||||
Associate role with enterprise | USERS_MANAGE_ROLES_OTHER_ENTERPRISES | This privilege allows a user to associate a role with any enterprise | X | ||||
Manage global role | USERS_MANAGE_SYSTEM_ROLES | This privilege allows a user to manage roles that are common and available to all enterprises, rather than being constrained to a single enterprise | X | ||||
Display connected users | USERS_ENUMERATE_CONNECTED | This privilege allows a user to |
display connected users | X |
X
Manage enterprises
Define enterprise manager | USERS_ |
DEFINE_AS_ |
MANAGER | This privilege |
defines a user as an enterprise manager. Enterprise managers receive physical machine notification emails | X | X | |||
Manage |
Chef enterprises | USERS_MANAGE_CHEF_ |
ENTERPRISE | This privilege allows a user to |
enable and manage Chef for enterprises | X | ||||
Manage |
scopes | USERS_MANAGE_ |
SCOPES | This privilege allows a user to manage |
X
No VDC restriction
USERS_PROHIBIT_VDC_RESTRICTION
Normally a user within an enterprise can have a list of VDCs assigned and these will be the only VDCs that they will be able to see. Setting this privilege exempts a user from having their VDC list restricted and they will be able to see all VDCs in their enterprise
X
X
Access Roles and Scope screens
scopes (add, edit and delete scopes) | X | ||||||
Manage enterprise reserved servers | USERS_MANAGE_RESERVED_MACHINES | This privilege allows a user to manage reserved servers at enterprise level | X | ||||
Allow user to push own metrics | USERS_PUSH_METRICS | This privilege allows a user to |
push their own metrics | X | X | X | ||
Manage |
provider credentials | USERS_MANAGE_ |
CREDENTIALS | This privilege allows a user to manage |
provider credentials (add |
and delete |
) | X |
Manage user applications | USERS_MANAGE_ |
APPLICATIONS | This privilege allows a user to |
manage applications (add and delete) | X | ||||
Manage |
reseller enterprises |
ENTERPRISE_MANAGE_ |
RESELLER | This privilege allows a user to manage |
resellers | X |
Display connected users
Manage key node enterprises | ENTERPRISE_MANAGE_KEY_NODE | This privilege allows a user to |
manage aggregation nodes | X |
Manage enterprise |
properties |
ENTERPRISE_ |
MANAGE_ |
PROPERTIES | This privilege |
allows a user |
Manage Chef enterprises
to manage enterprise properties | X |
X
Manage user allowed CIDRs | MANAGE_USER_CIDR_ACCESS | This privilege allows a user to |
manage |
allowed CIDRs for |
users | X | ||||
Manage |
virtual datacenter roles | USERS_MANAGE_ |
VDC_ROLES | This privilege allows a user to manage |
virtual datacenter roles (select default role, define user exceptions) | X | ||||
Manage |
role and scope allowed CIDRs | MANAGE_ |
This privilege allows a user to manage reserved servers at enterprise level
X
Modify enterprise theme
ROLE_AND_SCOPE_CIDR_ACCESS | This privilege allows |
X
Allow user to push own metrics
a user to manage allowed CIDRs for roles and scopes | X | ||||
Manage mail server for reseller | ENTERPRISE_MANAGE_SERVER_MAIL | This privilege allows a user to |
X
manage server mail for resellers | X | ||||
Manage user creation in provider |
ENTERPRISE_CREATE_USER_IN_PROVIDER | This privilege allows a user to manage user creation in a provider |
(in credentials list) | X |
Manage user applications
X | |||
Access user metadata (dashboards) | USERS_VIEW_USERS_METADATA | This privilege allows a user to |
access users metadata (dashboards) | X | ||||
Manage |
user metadata (dashboards) | USERS_MANAGE_USERS_ |
METADATA | This privilege allows a user to manage |
users metadata (dashboards) | X |
Manage key node enterprises
Access enterprise metadata (dashboards) | USERS_VIEW_ENTERPRISE_METADATA | This privilege allows a user to |
access enterprise metadata (dashboards) | X | ||||
Manage enterprise |
metadata (dashboards) | USERS_MANAGE_ENTERPRISE_ |
METADATA | This privilege allows a user to manage enterprise |
metadata (dashboards) | X | ||||
Manage |
default themes | USERS_MANAGE_THEMES | This privilege allows |
the user to manage |
the default theme for the platform (only one will be active) | X | ||||
Manage |
reseller themes | USERS_MANAGE_ |
RESELLER_ |
THEMES | This privilege allows |
the user to manage |
themes for resellers and their customers (only one active) | X |
Access budgets section
Manage theme login configuration | USERS_MANAGE_THEME_LOGIN_CONFIG | This privilege allows |
the user to |
manage the theme login css configuration | X | ||||
Manage |
organizational units | ORGANIZATIONAL_UNITS_MANAGE | This privilege allows a user to manage |
X
Manage role and scope allowed CIDRs
MANAGE_ROLE_AND_SCOPE_CIDR_ACCESS
This privilege allows a user to manage allowed CIDRs for roles and scopes
X
Manage mail server for reseller
ENTERPRISE_MANAGE_SERVER_MAIL
This privilege allows a user to manage server mail for resellers
X
Manage user creation in provider
ENTERPRISE_CREATE_USER_IN_PROVIDER
This privilege allows a user to manage user creation in a provider (in credentials list)
X
X
Access user metadata (dashboards)
organizational units | X | X | |||||
Pricing privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
---|---|---|---|---|---|---|---|
Access Pricing view | PRICING_VIEW | This privilege allows a user to access |
the Pricing view | X | ||||
Manage |
pricing | PRICING_MANAGE |
This privilege allows a user to manage |
X
Access enterprise metadata (dashboards)
USERS_VIEW_ENTERPRISE_METADATA
pricing components (add, edit and delete currencies, pricing models and extra charges) | X | ||||
Manage |
pricing credentials | MANAGE_ |
PRICING_ |
CREDENTIALS | This privilege allows a user to manage |
GUI Label _________________
Application Tag
Privilege____________________________________
Cloud Admin
Ent Admin
Ent User
Ent Viewer
Info
Access Pricing view
pricing credentials | X | X |
Pricing privileges
Generate billing | RUN_BILLING | This privilege allows a user to generate billings | X | X | |||
Manage hardware profile extra charges | COST_CODE_MANAGE_HARDWARE_PROFILE | This privilege allows a user to manage hardware profile extra charges | X | X | |||
Manage virtual machine extra charges | COST_CODE_MANAGE_VIRTUAL_MACHINE | This privilege allows a user to manage virtual machine extra charges | X | X | |||
Manage virtual machine template extra charges | COST_CODE_MANAGE_VIRTUAL_MACHINE_TEMPLATE | This privilege allows a user to manage virtual machine template extra charges | X | X | |||
View price factors | PRICE_FACTOR_VIEW | This privilege allows a user to access the |
Price factors view | X | ||||
Manage |
price factors | PRICE_FACTOR_MANAGE | This privilege allows a user to manage |
price factors | X | ||||
Manage |
enterprise products | COST_CODE_MANAGE_ENTERPRISE | This privilege allows a user to manage enterpirse products | X | X | |||
View enterprise products | COST_CODE_VIEW_ENTERPRISE | This privilege allows a user to |
view enteprise products | X | X |
Generate billing
View hardware profile extra charges | COST_CODE_VIEW_HARDWARE_PROFILE | This privilege allows a user to |
view hardware profile extra charges | X | X |
View virtual machine extra charges | COST_CODE_ |
VIEW_ |
VIRTUAL_ |
MACHINE | This privilege allows a user to |
view virtual machine extra charges | X | X |
View virtual machine template extra charges | COST_CODE_ |
VIEW_VIRTUAL_MACHINE_TEMPLATE | This privilege allows a user to |
view virtual machine template extra charges | X | X | |||
Regenerate billing | PRICING_REGENERATE | This privilege allows a user to regenerate billing for a pricing model | X | X |
Remove one-time extra charges from entities | COST_CODE_ |
REMOVE_ |
ONE_ |
TIME | This privilege allows a user to |
remove one-time extra charges from entities | X | X | |||||
Events privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
---|---|---|---|---|---|---|---|
Display all events for current enterprise | EVENTLOG_VIEW_ENTERPRISE | This privilege allows a user to display all events related to the current enterprise | X | X | X | X | |
Display all events | EVENTLOG_VIEW_ALL | This privilege allows a user to display all events | X | ||||
Control privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege___________________ |
Application Tag
_________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info | ||
---|---|---|---|---|---|---|---|
Access alarms section | USERS_VIEW_ALARMS | This privilege allows a user to access the alarms sections | X | ||||
Manage alarms | USERS_MANAGE_ALARMS | This privilege allows a user to manage alarms (create, edit and delete) | X | ||||
Access alerts section | USERS_VIEW_ALERTS | This privilege allows a user to access the alerts sections | X | ||||
Manage alerts | USERS_MANAGE_ALERTS | This privilege allows a user to manage alerts (create, edit and delete) | X | ||||
Access action plans, schedule and alert trigger tabs | ACTION_ |
Cloud Admin
Ent Admin
Ent User
Ent Viewer
Info
Access alarms section
PLAN_VIEW | This privilege allows a user to access the Action plans, the Schedule and Alert trigger tabs | X | |||||
Manage action plans and task schedules | ACTION_PLAN_MANAGE | This privilege allows a user to manage action plans, schedule and alert triggers | X | ||||
Access budgets section | BUDGET_VIEW | This privilege allows a user to access the |
budgets section | X | ||||
Manage |
budgets |
BUDGET_MANAGE |
This privilege allows a user to manage |
budgets (create, edit and delete) | X | ||||||
View enterprise hierarchy | ENTERPRISE_VIEW_HIERARCHY | This privilege allows the user to display the enterprises in a hierarchy | X | ||||
Access |
resource tags tabs and resource tags management view | TAGS_VIEW |
This privilege allows |
the user to display the Tags tab of resources and the Tags management view | X | ||||
Manage |
tags for compatible resources | TAGS_MANAGE |
This privilege allows |
the user to manage |
tags for compatible resources (add, edit, synchronize and delete) | X | ||||
Access |
tag policies view | TAG_POLICIES_VIEW | This privilege allows |
the |
X
Manage action plans and task schedules
ACTION_PLAN_MANAGE
This privilege allows a user to manage action plans, schedule and alert triggers
X
View enterprise hierarchy
user to display tag policies view | X | ||||
Manage tag policies | TAG_POLICIES_MANAGE | This privilege allows the user to |
X
Access resource tags tabs and resource tags management view
manage tag policies (add, edit and delete) | X | ||||
Manage cost usage report files | USERS_MANAGE_COSTUSAGE_REPORTS_FILES | This privilege allows |
a user to manage cost usage report files (create, edit and delete) | X | X | |||
Manage |
cost usage report filters | USERS_MANAGE_COSTUSAGE_REPORTS_FILTERS | This privilege allows |
a user to manage |
cost usage report filters (create, edit |
and delete) | X |
Access tag policies view
TAG_POLICIES_VIEW
This privilege allows the user to display tag policies view
X
Manage tag policies
X | |||
Schedule to generate cost usage CSV files | USERS_SCHEDULE_COSTUSAGE_REPORTS_FILTERS | This privilege allows |
a user to generate CSV files of cost usage reports | X | X | |||||
System configuration privileges |
|
|
|
|
|
|
|
GUI Label _________________ | Application Tag | Privilege____________________________________ | Cloud Admin | Ent Admin | Ent User | Ent Viewer | Info |
---|---|---|---|---|---|---|---|
Access Configuration view | SYSCONFIG_VIEW | This privilege allows a user to access the Configuration view | X | ||||
Modify configuration data | SYSCONFIG_ALLOW_MODIFY | This privilege allows a user to edit all system-wide configuration settings |
X
Allow access to reports
SYSCONFIG_SHOW_REPORTS
X | |||||||
Manage default dashboards | SYSCONFIG_MANAGE_DEFAULT_DASHBOARDS | This privilege allows a user to manage default dashboards | X |
Key to info column of privileges table
...