PDA

View Full Version : admin user for a single Project only ?



sharfuddin
29-Nov-2014, 22:28
per the admin guide

The admin role is global. If you assign a user to a project and give him the
admin role, the user can also add himself as an administrator for other
projects and thus gain full administrative rights across all projects.


how can I create admin user for a specific/single Project(OU) only ?

a_jaeger
01-Dec-2014, 08:46
per the admin guide

how can I create admin user for a specific/single Project(OU) only ?

What kind of rights should your admin user have on that project?

sharfuddin
01-Dec-2014, 20:46
What kind of rights should your admin user have on that project?

1) that admin can create and delete users for his project(organization) only
2) that admin can create/delete resources(e.g Images) and make them available/unavailable to users of his project(organization) only

I mean any possible administrative activity but on his own project only, rather a global admin.

a_jaeger
02-Dec-2014, 09:04
The policy.json files configure access control, for the images, see http://docs.openstack.org/juno/config-reference/content/section_glance-policy.json.html. But I'm not aware how this can be limited to specific projects only.