Manage access to cloud server placement groups

Access to cloud server placement groups is governed by a role model that defines access within an account and project. Read more in the Access Control in Servercore Products manual.

member

User with full access to all services. Does not have access to manage: users, service users, user groups, and federations.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available cloud server placement group operations	In the Account access scope: viewing quotas for all projects (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; managing placement groups: creating placement groups; deleting placement groups; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information
	In the Project access scope: viewing project quotas (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; managing placement groups: creating placement groups; deleting placement groups; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information

reader

A user with access to view everything that member manages in the same access scope.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available cloud server placement group operations	In the Account access scope: viewing quotas for all projects (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information
	In the Project access scope: viewing project quotas (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information

iam.admin

User with access to user management and no access to services and billing. Cannot manage their account: modify permissions, manage notifications, or delete a user. The first user with the iam.admin role is created by the Account Owner.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available cloud server placement group operations	manage users, service users, user groups with access to cloud server pool groups; managing federations

iam.viewer

A user with access to view everything that the iam.admin manages.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations with cloud servers and flavors	view users, service users, user groups; viewing federations; viewing user keys; viewing notifications of other users; viewing account access restrictions

compute.server_group.admin

User with access to cloud server placement group management. Does not have access to other products.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available cloud server placement group operations	In the Account access scope: viewing quotas for all projects (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; managing placement groups: creating placement groups; deleting placement groups; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information
	In the Project access scope: viewing project quotas (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; managing placement groups: creating placement groups; deleting placement groups; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information

compute.server_group.viewer

User with access to view cloud server placement groups. Does not have access to other products.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available cloud server placement group operations	In the Account access scope: viewing quotas for all projects (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information
	In the Project access scope: viewing project quotas (default quotas); viewing the list of placement groups and their information: group name, placement policy condition; viewing the list of flavors and their information: flavor name, number of vCPUs, RAM, and local disk size; viewing the list of SSH keys and their information