Modify user roles to add public cloud

To offer public cloud features, modify your user roles to add new privileges to enable the new features.

These lists contain some example privileges to consider. ALWAYS test your user roles in your own environment.

Users and tenant administrators

The privileges to consider for users and tenant administrators are as follows:

• Virtual datacenters

  • Manage floating IPs (currently assigned to enterprise administrators)

  • Manage VPNs (currently assigned to enterprise administrators)

  • Manage classic firewalls (VCD)

  • Assign public IPs to VMs

  • Access public network tab

  • Manage public network elements

  • Assign external IPs to VMs (VCD)

  • Access external network tab (VCD)

• Users

  • Manage provider credentials (if the customer will add their own public cloud account)

  • Manage virtual datacenter roles (if the customer will create read only users)

  • Access budgets section

  • Manage budgets

Platform administrators

If your platform administrators do not have cloud administrator roles, please check that they have all the appropriate privileges for public cloud, which may include the user list plus the following privileges:

• Home

  • Manage bills

• Infrastructure

  • Manage public cloud regions

  • Access infrastructure view and PCRs

  • View public cloud region details

• Virtual datacenters

  • Manage default virtual datacenter firewall

  • Manage VDC default roles

• Users

  • Manage enterprise properties

  • Manage virtual datacenter roles

• Control

  • View enterprise hierarchy