Roles can be customized according to operation procedures.
It is possible to customize roles as follows.
Deletion of unnecessary roles
Unused roles can be deleted.
The following roles cannot be deleted because they are allocated to user groups for operation management.
administrator
It is allocated to supervisor user groups.
tenant_admin
It is allocated to the user group corresponding to the tenant who created the tenant.
Limitation or addition of operation authority of roles
The operation authority of a basic role and created roles can be limited or added.
To create a new role, copy a basic role. The operation authority of the copied role can be limited or added to.
A new role cannot be copied from a copied role.
For details on the customization procedure, refer to the following.
"Chapter 3 Configuring Users and Customizing Roles" in the "User's Guide for Infrastructure Administrators (Resource Management) CE".
"12.1 rcxadm role" in the "Reference Guide (Command/XML) CE".
The following table shows the targets of operation and the content that can be customized.
Target | Operation | infra_admin | infra_operator | tenant_admin | tenant_operator | tenant_monitor | tenant_user | administrator | operator | monitor |
|---|---|---|---|---|---|---|---|---|---|---|
L-Platform | Subscribe | No | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
Reconfiguration | No | No | Yes | Yes | No | Yes | Yes | Yes | Yes | |
Cancel | No | No | Yes | Yes | No | Yes | Yes | Yes | Yes | |
Setup FW and SLB | No | No | Yes | Yes | No | Yes | Yes | Yes | Yes | |
Display event logs | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | |
L-Server | Creation | No | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
Configuration changes/Movement | No | No | Yes | Yes | No | Yes | Yes | Yes | Yes | |
Deletion | No | No | Yes | Yes | No | Yes | Yes | Yes | Yes | |
Modify attributes/Console screen | No | No | Yes | Yes | No | Yes | Yes | Yes | Yes | |
Starting an L-Server | No | No | Yes | Yes | No | Yes | Yes | Yes | Yes | |
Stopping an L-Server | No | No | Yes | Yes | No | Yes | Yes | Yes | Yes | |
Collecting cloning images | No | No | Yes | Yes | No | No | Yes | Yes | Yes | |
Backup/Snapshot | No | No | Yes | Yes | No | Yes | Yes | Yes | Yes | |
Restore backup and snapshot | No | No | Yes | Yes | No | Yes | Yes | Yes | Yes | |
Delete backup and snapshot | No | No | Yes | Yes | No | Yes | Yes | Yes | Yes | |
Maintenance | Yes | No | No | No | No | No | Yes | No | No | |
Image | Modification/Deletion | Yes | Yes | No | No | No | No | Yes | Yes | Yes |
ROR console | Display the Home tab | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
Display the Dashboard tab | Yes | Yes | Yes | Yes | Yes | No | Yes | Yes | Yes | |
Display the Resources tab | Yes | Yes | No | No | No | No | Yes | Yes | Yes | |
Display the Templates tab | Yes | No | Yes | No | No | No | Yes | No | No | |
Display the L-Platforms tab | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | |
Display the Request tab | Yes | No | Yes | No | No | Yes | Yes | No | No | |
Display the Tenant tab | Yes | No | Yes | No | No | No | Yes | No | No | |
Display the Accounting tab | Yes | No | Yes | No | No | No | Yes | No | No | |
Display Accounts | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
Yes: Can customize
No: Cannot customize
FW: Firewall
SLB: Server load balancer
The authority for creating L-Servers is necessary for subscribing to an L-Platform. Similarly, the authority for operating an L-Server is necessary to operate L-Platforms and L-Servers. The following tables show the operation authority necessary for each operation.
Target | Operation | Operation Authority for L-Servers | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
Creation | Configuration changes/Movement | Deletion | Modify attributes/Console screen | Starting an L-Server | Stopping an L-Server | Collecting cloning images | Collecting snapshot and backup | Restore snapshot and backup | Delete snapshot and backup | Maintenance | ||
L-Platform | Subscribe | Yes | - | - | - | - | - | - | - | - | - | - |
Reconfiguration | Yes | Yes | Yes | Yes | - | - | - | - | - | - | - | |
Movement | - | Yes | - | - | - | - | - | - | - | - | - | |
Cancel | - | - | Yes | - | - | - | - | - | - | - | - | |
Starting the server | - | - | - | - | Yes | - | - | - | - | - | - | |
Stopping the server | - | - | - | - | - | Yes | - | - | - | - | - | |
Backup/Snapshot | - | - | - | - | - | - | - | Yes | - | - | - | |
Restore backup and snapshot | - | - | - | - | - | - | - | - | Yes | - | - | |
Delete backup and snapshot | - | - | - | - | - | - | - | - | - | Yes | - | |
Image Collection | - | - | - | - | - | - | Yes | - | - | - | - | |
FW Settings | - | - | - | - | - | - | - | - | - | - | - | |
Referencing the FW log | - | - | - | - | - | - | - | - | - | - | - | |
SLB Settings | - | - | - | - | - | - | - | - | - | - | - | |
SLB Operations | - | - | - | - | - | - | - | - | - | - | - | |
SLB Operation logs | - | - | - | - | - | - | - | - | - | - | - | |
L-Server | Attaching disks | Yes | Yes | - | - | - | - | - | - | - | - | - |
Addition of NICs | Yes | Yes | - | - | - | - | - | - | - | - | - | |
Registering agents | Yes | Yes | - | - | - | - | - | - | - | - | - | |
Modifying specifications with migration | Yes | Yes | - | - | - | - | - | - | - | - | - | |
Starting with AttachAtBoot specified | Yes | Yes | - | - | Yes | - | - | - | - | - | - | |
Starting physical L-Servers | Yes | - | - | - | Yes | - | - | - | - | - | - | |
Cold migration | - | - | - | - | - | Yes | - | - | - | - | Yes | |
Yes: Necessary
-: Not necessary
FW: Firewall
SLB: Server load balancer
