To modify the privileges of a user role:
Privilege: Manage privileges
- Go to Users → Roles
- For a local role, select the enterprise that the role belongs to
- Select the role from the Roles list
- In the Privileges pane, select or deselect the privileges
- To add or remove groups of privileges, click the All privileges checkbox beside the group name
- You cannot undo but you can discard the changes
- Save the changes by clicking Save
The platform will discard your changes if you do an action outside of the Privileges pane, for example, clicking on a another role name
Troubleshooting and Tips
Roles
- The default CLOUD_ADMIN role has all privileges and is locked
- You can only access roles with the same privileges or fewer privileges than your own role
- You cannot modify your own role.
Privileges
- You can only select or deselect privileges that are in your own role
- Privileges are generally independent.
For example, for a user with a role without the "Access Infrastructure view" privilege, the Infrastructure icon does not display in the UI. However, if this user's role has the privileges to "Manage datacenters" and "View datacenter details", the user will be able to access these functions through the API