XO RBAC Granularity?
-
It doesn't appear that XO provides any granularity when adding users to XO. There are just a User or an Admin? And a User basically can't do anything? Will this be changing with XO6? Will there be RBAC & granularity coming in the future? Some RBAC roles that would be nice to have:
- A Read-Only account for all XO Objects would be nice
- Various Roles, aside from full admin access, like below:
- VM Managment --> user can only manage any VM configs
Ability to create VMs
Ability to remove VMs - Host Management --> ability to add & manage Hosts in XO
- Network Management --> user can only manage Host or VM storage
- Storage Management --> user can only manage Host or VM networking
- Folders --> XO doesn't have these 'objects', but adding ability to create folders in the XO webUI then abiltiy to grant user access to those folders would be great. Would be nice to be able to add VMs to VM folders; or, ability to create Network Folders and assign permissions to manage 'vm networks'; or Storage Folders...again, to grant users ability to add then manage storage for only SRs added to those Folders.
Those are just examples. But, my main reason for this post is to verify I'm not overlooking anything -- there is no role/permissions granularity currently in XO correct? Thanks!
-
I believe what your looking for, is in the Groups and ACL in XOv5 that will give you that. I haven't dug into those settings specifically to say for sure you can or cant do what your asking.
-
@acebmxer Ah, ok...thanks Ace. I'll look at it. At the very least...would probably be best for Vates to revamp this function to make it more intuitive. Appreciate the assist!
-
Well, after a little more digging...I find that this is still not a 'clean' solution imo. I mean, if you're big into APIs....I guess. But, I'd like to see something intuitive in the webUI. Would like to see @julienxovates and @olivierlambert make this a UI feature, instead of a CLI function..or separate URL(swagger) function
Thanks!
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login