Manage access to cloud server placement groups

Access to cloud server placement groups is governed by a role-based access control model, which defines access within an account and a project. Learn more in the Access management in Servercore products instructions.

member

A user with full access to all services. Does not have access to managing: users, service users, user groups and federations.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available cloud server placement group operations	In the Account access scope: viewing quotas for all projects (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; managing placement groups: creating placement groups; deleting placement groups; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information
	In the Project access scope: viewing project quotas (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; managing placement groups: creating placement groups; deleting placement groups; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information

reader

A user with access to view everything managed by member in the same access scope.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available cloud server placement group operations	In the Account access scope: viewing quotas for all projects (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information
	In the Project access scope: viewing project quotas (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information

iam.admin

A user with access to user management and no access to services or billing. Cannot manage their own account: change permissions, manage notifications, or delete the user. The first user with the iam.admin role is created by the Account Owner.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available cloud server placement group operations	manage control panel users, service users, user groups with access to cloud server placement groups; manage federations

iam.viewer

A user with access to view everything managed by iam.admin.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations with cloud servers and flavors	view control panel users, service users, user groups; view federations; viewing user keys; viewing notifications of other users; viewing account access restrictions

compute.server_group.admin

A user with access to manage cloud server placement groups. Does not have access to other products.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available cloud server placement group operations	In the Account access scope: viewing quotas for all projects (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; managing placement groups: creating placement groups; deleting placement groups; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information
	In the Project access scope: viewing project quotas (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; managing placement groups: creating placement groups; deleting placement groups; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information

compute.server_group.viewer

A user with access to view cloud server placement groups. Does not have access to other products.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available cloud server placement group operations	In the Account access scope: viewing quotas for all projects (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information
	In the Project access scope: viewing project quotas (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information