Modify the privileges of a role

To modify the privileges of a user role:

Privilege: Manage privileges

Go to Users → Roles
For a local role, select the enterprise that the role belongs to
Select the role from the Roles list
In the Privileges pane, select or deselect the privileges
- To add or remove groups of privileges, click the All privileges checkbox beside the group name
- You cannot undo but you can discard the changes
Save the changes by clicking Save
- The platform will discard your changes if you do an action outside of the Privileges pane, for example, clicking on a another role name

Troubleshooting and Tips

Roles

The default CLOUD_ADMIN role has all privileges and is locked
You can only access roles with the same privileges or fewer privileges than your own role
You cannot modify your own role.

Privileges

You can only select or deselect privileges that are in your own role
Privileges are generally independent.
For example, for a user with a role without the "Access Infrastructure view" privilege, the Infrastructure icon does not display in the UI. However, if this user's role has the privileges to "Manage datacenters" and "View datacenter details", the user will be able to access these functions through the API