2.1 Roles

Users are classified into three departments, and the representative, approver, and administrator roles. Based on these roles, the authority possessed for operations within the cloud management portal varies.

When creating a user, be sure to assign the appropriate role.

Operation Authorities of Platform Providers

Platform providers develop and provide platforms or applications using clouds.

Platform provider users possess organization information.

Table 2.1 Operation Authorities of Platform Providers
Menu	Approver	Representative
Contract Management	No authorities	No authorities
Menu Management	Reference	Reference
Project Management	Add Modify/Delete (Refer to "Roles in Projects")	Modify/Delete (Refer to "Roles in Projects")
Platform Management	Refer to "Roles in Projects"	Refer to "Roles in Projects"
Organization/User Management	Reference of the organization information in the platform provider's own organization Add/Modify/Delete of the user information in the platform provider's own organization	Reference of the organization information in the platform provider's own organization Add/Modify/Delete of the user information in the platform provider's own organization
Request Management	Request/Cancel/Approve/Reject	Request/Cancel
Billing Management	Reference by organization in the platform provider's own organization/reference by project of the projects to which the platform provider belongs	Reference by organization in the platform provider's own organization/reference by project of the projects to which the platform provider belongs

Operation Authorities of Operators

Operators handle the operation and maintenance of Cloud Services Management.

In addition to the approver and representative roles, operators can be configured with the administrator role.

The administrator role has operation authority for all resources except those related to requests. The administrator role is used to perform special operations related to maintenance and operation, such as investigating and recovering from failures, and verifying connections with external clouds.

Operator users do not possess organization information.

Table 2.2 Operation Authorities of Operators
Menu	Approver	Representative	Administrator
Contract Management	Add/Modify/Delete	Add/Modify/Delete	Add/Modify/Delete
Menu Management	Reference	Reference	Add/Modify/Delete
Project Management	Reference	Reference	Add/Modify/Delete
Platform Management	Reference	Reference	Add/Modify/Delete
Organization/User Management	Add/Modify/Delete	Add/Modify/Delete	Add/Modify/Delete
Request Management	Request/Cancel/Approve/Reject	Request/Cancel/Approve/Reject	Request
Billing Management	Reference By Organization Reference By Menu Reference By Project	Reference By Organization Reference By Menu Reference By Project	Reference By Organization Reference By Menu Reference By Project

Operation Authorities of Planners

Planners handle the selection of clouds to be used by a company and the cloud contracts.

Planner users do not possess organization information.

Table 2.3 Operation Authorities of Planners
Menu	Approver	Representative
Contract Management	Reference	Reference
Menu Management	Add/Modify/Delete	Add/Modify/Delete
Project Management	Reference	Reference
Platform Management	Reference	Reference
Organization/User Management	Reference only of organization information Add/Modify/Delete of user information	Reference only of organization information Add/Modify/Delete of user information
Request Management	Request/Cancel/Approve/Reject	Request/Cancel
Billing Management	Reference By Organization Reference By Menu Reference By Project	Reference By Organization Reference By Menu Reference By Project

Dual Roles

Dual roles can be assigned to users.

The following dual roles can be assigned:

Planners & Platform Providers - Approver
Planners & Platform Providers - Representative
Operators & Platform Providers - Approver
Operators & Platform Providers - Privileged Approver
Operators & Platform Providers - Representative
Operators & Platform Providers - Privileged Representative
Operators - Privileged Approver
Operators - Privileged Representative

When a dual role user performs an operation for a department, the user's role must be switched accordingly.

However, users can cancel their own requests without switching roles.

Note

A user cannot be both an approver and a representative.

Roles in Projects

Project users have roles valid within the relevant project in addition to the approver or representative role. During creation of a project, a role is granted to each user added as a project member.

This role determines the user's authorities for service operations targeting the project and platforms in the project.

Project Manager

The project manager role is granted to the user who created the project.

Projects can be created by users who have the platform provider approver role.

Project managers can manage, modify, and delete information of the relevant project.

Project User

The project user role is granted to the members added to the project.

Users who have this role can use platforms added to the project and services added to those platforms.

Each role has the following operation authorities.

Service operations refer to the starting and stopping of virtual machines, and the creation, restoration, and deletion of snapshots.

Table 2.4 Project Roles and Authorities
Project Role	Projects	Platforms	Services
Project Manager	Modify/Delete Add/Delete of project members	Add/Modify/Delete	Add/Modify/Delete Service Operations
Project User	Add/Delete of project members	Add/Modify/Delete	Add/Modify/Delete Service Operations