Manage access to cloud server network volumes and snapshots

Access to cloud server network volumes and snapshots is governed by a role model that defines access within an account and project. See the Access Control in Servercore Products manual for more details.

member

A user with full access to all services. Does not have permission to manage: users, service users, user groups, and federations.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with cloud server network volumes and snapshots	In the Account access scope: view a list of all network volumes and information about them: disk type, disk size, connected backup plans, created snapshots; view general disk statistics; create disks: manage disks; manage connected backup plans; view a list of all snapshots: snapshot size, creation date, and status; create and manage disk snapshots
	In the Project access scope: view a list of all network volumes and information about them: disk type, disk size, connected backup plans, created snapshots; view general disk statistics; create disks; manage disks; manage connected backup plans; view a list of all snapshots: snapshot size, creation date, and status; create and manage disk snapshots

reader

User with access to view everything managed by member in the same access scope.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with cloud server network volumes and snapshots	In the Account access scope: view a list of all network volumes and information about them in account projects: disk type, disk size, connected backup plans, created snapshots; view general disk statistics; view a list of all snapshots: snapshot size, creation date, and status
	In the Project access scope: view a list of all network volumes and information about them in your project: disk type, disk size, connected backup plans, created snapshots; view general disk statistics; view a list of all snapshots: snapshot size, creation date, and status

billing

User with access to billing management and no access to service management.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations with cloud server network volumes and snapshots	billing management

iam.admin

A user with access to user management, but without access to services or billing. Cannot manage their own account: change permissions, manage notifications, delete a user. The first user with the iam.admin role is created by the Account Owner.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations with cloud server network volumes and snapshots	manage users, service users, user groups with access to cloud server network volumes; manage federations

iam.viewer

User with access to view everything managed by iam.admin.

Access scopes	Account
Who can be assigned	users; service users; user groups
Available operations with cloud server network volumes and snapshots	view users, service users, user groups and federations; view user keys; viewing notifications of other users; viewing account access restrictions

compute.volume.admin

User with access to cloud server network volume management. Does not have access to other products.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with cloud server network volumes	In the Account access scope: view a list of all network volumes and information about them: disk type, disk size; create disks; manage disks; move disks between projects; view disk migration information
	In the Project access scope: view a list of all network volumes and information about them: disk type, disk size; create disks; manage disks; move disks between projects; view disk migration information

compute.volume.user

User with access to cloud server network volume management. Does not have access to other products in their project or to network volumes in other projects.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with cloud server network volumes	In the Account access scope: view a list of all network volumes and information about them: disk type, disk size; create disks; manage disks
	In the Project access scope: view a list of all network volumes and information about them: disk type, disk size; create disks; manage disks

compute.volume.viewer

User with access to view network volumes. Does not have access to other products.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with cloud server network volumes	In the Account access scope: view a list of all network volumes and information about them: disk type, disk size
	In the Project access scope: view a list of all network volumes and information about them: disk type, disk size

compute.snapshot.admin

User with access to network volume snapshot management. Does not have access to other products.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with snapshots	In the Account access scope: view a list of all snapshots: snapshot size, creation date, and status; create snapshots; manage snapshots
	In the Project access scope: view a list of all snapshots: snapshot size, creation date, and status; create snapshots; manage snapshots

compute.snapshot.viewer

User with access to view network volume snapshots. Does not have access to other products.

Access scopes	account; project
Who can be assigned	users; service users; user groups
Available operations with snapshots	In the Account access scope: view a list of all snapshots: snapshot size, creation date, and status
	In the Project access scope: view a list of all snapshots: snapshot size, creation date, and status