Manage access to metrics

Access to metrics is governed by a role model that defines access within an account and a project. For more information, see Access management in Servercore products.

member

A user with full access to all services. Cannot manage: users, service users, user groups, and federations.

Access scopes	account; project
Can be assigned to	users; service users; user groups
Available operations with metrics	In the Account access scope: collecting metrics
	In the Project access scope: collecting metrics

reader

A user with access to view everything managed by member in the same access scope.

Access scopes	account; project
Can be assigned to	users; service users; user groups
Available operations with metrics	In the Account access scope: collecting metrics
	In the Project access scope: collecting metrics

iam.admin

A user with access to user management and without access to services and billing. Cannot manage their own account: change permissions, manage notifications, delete the user. The first user with the iam.admin role is created by the Account Owner.

Access scopes	Account
Can be assigned to	users; service users; user groups
Available operations with metrics	managing control panel users, service users, user groups with access to metrics

iam.viewer

A user with access to view everything managed by iam.admin.

Access scopes	Account
Can be assigned to	users; service users; user groups
Available operations with metrics	viewing control panel users, service users, user groups; viewing user keys

metrics.admin

A user with access to metric management. Does not have access to other products.

Access scopes	account; project
Can be assigned to	users; service users; user groups
Available operations with metrics	In the Account access scope: collecting metrics
	In the Project access scope: collecting metrics