Control access to network and IP features

Description of networks and IPs features

Administrators can manage IPs, private networks, and default VDC networks. To display the available networks go to Virtual datacenters → select virtual datacenter →  Network.

In a private cloud datacenter, the default types are Private, External, and Public. In public cloud, the default types are Private and Floating IPs. In private cloud with network virtualization systems, NAT networks may be available. 

Open

Default access to networks and IPs feature

By default, enterprise administrators can manage private and VDC default networks, and IPs. 

Standard users who have privileges to configure VMs can add public, floating and NAT IPs that are already assigned to the VDC and IPs that are available in external networks. And users can always create IPs and add IPs in private networks. 

Control access to virtual network elements 

To prevent administrators from performing the following list of actions in the virtual datacenter, remove the "Manage virtual network elements" privilege from the enterprise administrator role:

• Manage private networks and IPs

• Edit networks to set the default VDC network

• Manage public, NAT, or floating IPs

When the user does not have this privilege, the platform does not display the control buttons for the Networks list and Public IPs.

Control access to IPs for the virtual datacenter

To prevent users from obtaining a specific type of IPs to add to VMs, remove the appropriate privileges:

• Manage public IPs

• Manage floating IPs

• Manage NAT IPs

When a user has the Manage virtual network elements privilege but they do not have the Manage public IPs privilege, the control buttons do not display for the IPs panel.